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NEWSPAPER 


MAJ. MARCUS 
SACHS is on the front 
lines of defending 
U.S. computer net- 
works from attack. 


THE PENTAGON WORRIES THE MOST ABOUT 
a cyberattack that could cripple the U.S. information 
infrastructure, but Deborah Radcliff reports that it’s 
the private sector that needs to actually do something 


about it. Why? Because the targets are likely to be util- 


ities, telcos, banks and other economic nerve centers 


that are outside the military’s control. 


Stories begin on page 44. 


BUSH EXPECTED TO 
RATTLE FEDERAL IT 





| Players in new administration are fond of 
centralization, outsourcing, e-government 





| BY PATRICK THIBODEAU 
| WASHINGTON 


| As if it were a hostile takeover, 
| the inauguration of a new pres- 


| of uncertainties about 


| while 
| managers 
| civil service job protec- 
| tions, they will want to 


ident brings federal CIOs a lot 
their 
work and jobs. But 
most federal IT 
have some 


| do more than merely survive in 
| their positions — they hope for | 
| more responsibility in the new 
| administration. 


“It all comes down to this: | 


| Does your new boss like you or 


| federal job two years ago. His | 


LAVOFFS REIGNITE CAL! FOR UNIONS 


| Evans, 


the U.S. Department of Com- 


| you're on his team, that he un- 


| 
| 
| 
| 


| 
| 
| 
| 
| 
| 
| 
| 


not?” said Roger Baker, CIO at | 


| including expanded 


| derstands what you are all 
about and that you can add 
value to the organization,” said 
Baker. “In the end, he’s got to 
decide that you’re the person 
he wants in the job, not 
that he inherited you.” 
Federal CIOs say 
they expect President 
George W. Bush to bring 
s to the $40 
billion federal IT operation, 
online 
government initiatives, a move 





toward centralized control of 


IT management through a fed- 
eral CIO, and cross-agency ini- 


| tiatives — the sharing of IT re- 


| merce, who worked in the pri- | 


vate sector before taking the | 


boss will be Donald 
the Commerce secre- 


new 


| tary-designate. 


“You’ve got to make sure | 
| Job security an iss an issue 





REPORT: NET RISKS ON RISE IN CHINA 


Yet U.S. firms ther there see 


BY DAN VERTON 


| ernment surveillance and loss 
of proprietary data. But some 


no cause for concern | 
————$$__—__—— | those threats as exaggerated. 


U.S. companies said they view 


The latest warning comes 


Intelligence and security ex- | from a report published last 
perts are warning foreign firms month by a network security 


in China of a growing threat of | 
Internet-related crimes, gov- | 


firm founded by two former 
US. Navy intelligence officers. 
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The report, released by Dub- 
lin, Ohio-based LogiKeep Inc., 
cautions companies that the 
government-controlled Inter- 
net environment in China 
could put the integrity of their 
networks at risk. 

“The most important con- 
sideration is that, in one way or 
another, the government is in- 
volved in the operation, regu- 
lation and monitoring of the 
country’s networks,” states the 
report, “The People’s Republic 


| of China: A Network Security 
| Threat Assessment.” 


As a re- 
sult of this and other factors, 


| such as tensions with Taiwan, 


“U.S. companies could see an 
increase in scans, probes and 


attacks” that could be aimed at 


China, page 81 





sources affecting everything 
from application development 


for dot-com workers 


BY JULEKHA DASH 


As more Web-related firms dis- | 


miss technology workers each 
week, the time may finally be 
ripe for IT unions, according to 
labor officials. 

Nationwide, job cuts at In- 


6 t ti 0 . 
Attempts to organize 
technology workers: 
Company: Etown.com 


Union: Northern California 
Media Workers Guild 





Union: Washington Alliance 
of Technology Workers 


Bipartisan 
Outsourcing? 

The federal government spent 
$2.58 last year on IT outsourcing 
out of a total federal iT budget of 
nearly $40B. Federal IT outsourcing 
is expected to grow at 7.3% an- 
nually to $3.6B by 2005. That esti- 
mate was made by market research 
firm Input before Bush's election, but 
the firrn is sticking with it because of 
the generally bipartisan support 
for contracting IT services, said 


Kevin Plexico, a vice president at 
Charitilly, Va.-based Input. 





acd 





to help desk operations. 
“Hopefully, it’s going to be a 
more structured, more con- 
nected organization,” said 
George Molaski, CIO at the 
Department of Transportation. 
Federal IT, page 14 


ternet firms rose almost 20% 
from November to December, 
to a total of 19,248 for both 
months, according to Chicago- 
based outplacement firm Chal- 
lenger, Gray & Christmas Inc. 
Just last week, Cable News 
Network, an Atlanta-based 
unit of the newly formed AOL 
Time Warner Inc., laid off 400 
employees, one-third of whom 
were online staffers. 

“The sooner people band to- 
gether for mutual relief, the 
better they are facing things 
like layoffs,” said Erin Poh, a 
representative of the Northern 
California Media Workers 
Guild, which is working to or- 


ganize a union at San Francis- 


co-based online consumer- 

electronics firm Etown.com. 
But critics argued that in 
spite of the economic down- 
Unions, page 16 
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THINK 
OUTSIDE 
THE 

CUBE. 






With our wireless LAN solution, 
anyone with a notebook can roam 
freely throughout the building and 
still be connected to the company 
network. So people can do their best 
work wherever they do their best 
thinking. Welcome to the new IT. 
Inspiration Technology from Compaq. 
To find the nearest reseller call 
1-800-AT-COMPAQ. To learn more 


visit us at compaq.com/wlan. 


COMPAG 


Inspiration Technology 


GOOD MORNING 


Once again, today has arrived. And it brings with it the 
same meetings, the same problems, and, in many 
cases, the same solutions. Unfortunately, many of 
those same solutions aren’t working. Because 
business has been transformed by the little letter e. 
And the technology that was once the domain 
of twentysomethings with a website and a warehouse 
in their garage is now an integral part of every business. Fortunately, 
however, the same principles that made for good management before 
still make good eBusiness sense. Of course, that’s a lot more difficult 
now that your business isn’t contained by four walls and needs to be 
accessible anywhere, anytime, for anyone. That’s why it’s more important 
than ever to have the very best software. Software that manages your 
business processes -— integrating all parts of your company, including 


suppliers and partners, to make sure that they’re working together 


seamlessly. Software that manages information — storing, accessing, and 


utilizing the vast wealth of knowledge that you continually gather about 
yourself and your customers. Software that manages your infrastructure — 
maintaining and securing your assets while letting you see the big 
picture to ensure that everything keeps running smoothly. There’s no doubt 
about it. Things have changed. But that just means there will be new 


solutions to the old problems. And we think that’s a change for the better. 


HELLO TOMORROW 


WE ARE COMPUTER ASSOCIATES 
THE SOFTWARE THAT MANAGES eBUSINESS 


<a) 


Computer Associates 





THE WEB'S 


MASTER 
BUILDERS 


Information architects 

who guide a user’s expe- 

J a ; Me rience through a Web site 

ay ; . are becoming the key IT 

silion professionals charged 

with turning a functional 

- Web site into a truly 

LifeFX, a small company in suburban Boston, specializes in useful one. Page 71 
uncannily lifelike 3-D human images. Page 61 
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ONLINE 


\ panel of experts dissects a failed 


dot-com and discusses whether 


SECURITY JOURNAL 


59 JUDE THADDEUS ponders 


$360M to acquire Allaire, as 
the merged company faces the 
challenge of .Net. 


ORACLE TOUTS three new 


B2B products, but some users 
are skeptical about reliability. 


FEDS ISSUE financial 
service security rules as 
“guidelines,” giving flexibility 
to private companies in meet- 
ing the requirements to protect 
customer data. 


THE GAO WARNS that the 


government’s information se- 
curity program isn’t keeping 
pace with growing threats. 


BMW ENTERS the tele- 
matics space by adding voice- 
activated and Web-enabled 
phones to its cars. 


LOTUS PUSHES knowledge 
management at its Lotusphere 
2001 conference, while users 
swap advice on migration to 
Notes RS. 


TRAVELOCITY PREDICTS 
it will be profitable by the end 
of the second quarter — six 
months ahead of schedule. 


JOHNSON CONTROLS 
launches an exchange for its 
automotive suppliers, taking 
on the Big Three automakers’ 
Covisint exchange. 


MORE 


Editorial, Letters 

How to Contact CW... 
Shark Tank 

Company Index 


a new marketplace that aims 
to tie together the disparate 
transportation industry. 


TRADERS DEBATE the 
value of Nasdaq’s newly 
approved trading system, 
SuperMontage. 


WORKSTYLES 
CAMBRIDGE INCUBATOR 
makes sure its IT department 
is flexible enough to support a 
variety of companies’ infra- 
structures on short notice. 


CYBERTHREATS KEEP 


the Critical Infrastructure 
Assurance Office on constant 
guard. 


EMPLOYERS CAN GUARD 
their top talent by learning to 
beat pushy recruiters at their 
own game. 

QUICKSTUDY 
SERVICE-LEVEL agree- 
ments can help navigate the 
way to an effective ASP con- 


MARYFRAN JOHNSON 
writes that IT leaders must 
shift into a global mind-set to 
help their companies succeed 
on a worldwide basis. 

PIMM FOX says he believes 
that ERP could be a technolog- 


ical solution to the power crisis 
that’s gripping California. 


how his company should adapt 
to surveillance laws. 

EXEC TECH 

compete for the attention of re- 
views editor Russell Kay at the 
Consumer Electronics Show. 


EXCHANGE 2000 server 
delivers major improvements 
over its predecessor, but the 
upgrade path may be steep. 


EFFECTIVE STORAGE 
management remains an 
elusive goal despite new 
software tools. 

QUICKSTUDY 

COMPUTERS NEED HELP 
to understand English or even 
programming languages — 
that’s where compilers, inter- 
preters and byte code come in. 
EMERGING COMPANIES 
BLACKSTONE Technology 
cultivates compute farms to 
make high-end processing 
power available. 


JOHN GANTZ offers advice 
for choosing an application 
service provider, as that market 
changes. 


DON TAPSCOTT says 
George W. Bush can carve 
out a place in history by using 
IT to widen democracy. 


WILLIAM M. ULRICH has 
some suggestions for com- 
panies in managing their 
“information ecosystems,” IT 


there was anything that could have 
been done to save the compam 
Check out this new feature in our 
E-Commerce Community at 
www.computerworld.com 
ecommerce 


\lso in the E-Commerce Community 
Xchange Inc. CEO Andy Frawley 
considers whether CRM has lived 
up to its promise. www.computer- 
world.com/ecommerce 


Mobil 


Check out the latest 

version of Computer 

world Mobile for your handheld de 
vice. New features include the ability 
to select a specific topic for stories 
that are sent to your customized 
news, and the ability to save stories in 
a device indefinitely even after 
channel content is updated. Sign up 
at www.computerworld.com/mobile. 


environments that interact 
with other organizations. 


ED YOURDON offers advice 
to help keep projects funded 
and morale up during the 
economic downturn we may 
be facing. 


FRANK HAYES says 17 
organizations must take 

the proper steps to stop 
thrill-seeking teen-agers from 
hacking corporate Web sites. 


www.computerworld.com 


























AT DEAL 





Sandia Labs Plans 
New Supercomputer 


The U.S. Department of Energy said 
last week that its Sandia National 
Laboratories in New Mexico is team- 
ing up with Compaq Computer Corp. 
and Celera Genomics Group, a 
biotechnology firm in Rockville, Md., 
to develop a supercomputer. The 
box is supposed to be capable of 
processing 100 trillion operations 
per second. It will be based on 
future versions of Compaq’s Alpha- 
Server SC supercomputer line. A 
prototype isn’t expected until 2004. 


ACLU Wants Hearings 
On Top-Level Domains 


The American Civil Liberties Union 
and several other groups champi- 
oning “cyberrights” last week sent 
a letter to the U.S. Department of 
Commerce criticizing the planned 
addition of seven new top-level In- 
ternet domains. The letter argued 
that the Marina del Rey, Calif.-based 
Internet Corporation for Assigned 
Names and Numbers placed artifi- 
cial limits on the number of new 
domains and asked for a hearing. 


AOL Gives Sun 
More Business 


America Online Inc. last week said it 
will purchase $400 million worth of 
Sun Microsystems Inc. equipment 
during the next two years to meet 
the needs of more than 26 million 
AOL members, 2.8 million Compu- 
Serve Corp. members and millions 
of users of other AOL-owned brands. 
That means that Dulles, Va.-based 
AOL has committed to spending 
$900 million on Sun equipment to 
date. Meanwhile, Sun announced its 
second-quarter results, saying net 
income rose 56% from the same 
period a year earlier to $552 million. 


Topaz Beta Progresses 


Microsoft Corp. last week an- 
nounced that its Systems Manage- 
ment Server, code-named Topaz, 
will be released for initial beta-test- 
ing in the second half of this year. 
A new complementary application, 
Microsoft Operations Manager, is 
scheduled for beta-testing in the 
first quarter. 











| not have to do software 


NEWS 


7 Oracle Users Cautious 


About ‘E-Hub’ Strategy 


Some skeptical about product reliability 


BY MARC L. SONGINI 
SERS MAY ben- 
efit from Ora- 
cle Corp.'s road 
map that 
announced last 
week to create a centralized, 
integrated marketplace infra- 
structure, said. But 
first, the giant will 
have to convince at least some 
of its customers that the prod- 
this frame- 
enough for 


was 


analysts 
software 


ucts underlying 
work are reliable 
them to buy into the plan. 

Last week, the company an- 
nounced plans to introduce 
three marketplace-related sup- 
ply-chain, logistics and appli- 
cation development software. 
More important, it began to 
elaborate on its so-called e-hub 
strategy, first announced late 
last year. The e-hub model, say 
Oracle executives, is designed 
to let enterprise 
create a single data-formatting 
and -sharing infrastructure for 
all applications connected to 
the Oracle marketplace. 

The e-hub will enable com- 
panies to bolt legacy applica- 
tions 
the marketplace and use the 
existing system without major 
development efforts, said Mark 
Jarvis, chief marketing officer 
at Oracle. “Customers should 
inte- 
gration. The software compa- 
ny should,” he said. 


Something to Prove 


However, a large number of | 


users are still hashing through 
problems from 
ing Oracle’s recently released 
E-Business Suite lli software. 


The new marketplace appli- | 


cations have no appeal at 
Eaton Corp., an $8.4 billion in- 
dustrial manufacturer. 


“From an Eaton perspective, 


| they are not even on our radar | 


said John Schindler, 


screen,” 
program 


and working, we are not con- 


| sidering looking at or dis- 
| cussing anything from Oracle, 


customers 


and new software onto | 


no matter what the sales and 
marketing folks have to say.” 

“In concept, [the e-hub is] a 
great idea,” said Karen Gilbert, 
an Oracle Applications User 
Group board 
works at Dallas-based consult- 
ing firm Computer Systems 
Authority. “ 
to have to prove it works, and 
that it works without an Oracle 
developer sitting at the cus 
tomer site doing all the imple- 
mentation.” 

There are also other poten- 
tial downsides, she noted. For 
instance, a failure in one part 
of the e-hub could crash the 
whole infrastructure. It 


member who 


But Oracle is going 


also 


means that all upgrades have 
to be conducted systemwide. 
Nevertheless, some observ- 
ers said Oracle is working to 
make life easier for enterprise 
Instead of designing 
point-to-point integration sys- 
tems with specific transactions 


users. 


for each business process, e- 
hub is expected to let users cre- 
ate one central infrastructure 
that will handle data translation 
and routing, said John Fontanel- 


la, an analyst for business-to- 


business marketplaces at AMR | 


Research Inc. in Boston. 
“Without the framework and 

the basic integration compo- 

nents, their business-to-busi- 


ness is going nowhere,” he said. 


While other major compa- | 


nies such as IBM and San Jose- 
based BEA Systems Inc. are 


Customers Optimistic After 
Macromedia/Allaire Merger 


BY LEE COPELAND 
In a $360 million cash-and- 
stock swap, Macromedia Inc. 
last week acquired Allaire 
Corp., making a legal union of 
what many developers called a 
common-law marriage of the 
firms’ Web site design and 
back-end application develop- 
ment tools. 

San Francisco-based Macro- 
media said it hopes the merger 


| will boost its Web design tools, 





implement- | 


manager for IT. | 
“Until Oracle gets their lli re- | 
lease of the applications stable | 


Postmerger Goals 


Macromedia will focus on 
integration with tools from 
Allaire to: 


= Make Allaire’s ColdFusion 
compatible with 
Java 2 Enterprise Edition 


8 Integrate Allaire's 
HomeSite and Macromedia's 
Dreamweaver 


= Deliver new free components, 
code-named Harpoon, that tie 
Macromedia’s Flash 
with Allaire’s JRun and 
ColdFusion application server 
development tools 





such as its popular Flash ani- 
mation software, by integrating 
with Allaire’s application de- 
velopment tools. Developers 
and analysts lauded _ the 


merger, which could also bet- | 


ter the merged firm’s competi- 


tive position against rival Mi- | 
| and loading Web data has been 


crosoft Corp. 


“This is a chance for Macro- 


media to improve its products 


| by extending the server-side 


[functionality],” said Jaro von 
Flocken, CEO of New Image 


Ltd., a Web design start-up in | 


Berlin. “This is an important 
issue because most big enter- 


| prises use a database engine | 


on the back end of their Web 


site and Macromedia doesn’t | 
| opment tools with its Internet 


support that.” 
Newton, Mass.-based Allaire 
makes two application devel- 


} | opment servers: ColdFusion, a 
cross-platform 
}| runs both Microsoft’s Active 


product that 
Server Pages and JavaServer 
Pages, and Java-based JRun. 
After the merger, Macromedia 
will add Java 2 Enterprise Edi- 
tion compliance to ColdFusion 
and link its other design tools 
to both application servers. 





| products 
| sells 
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The Power of Three | 


Oracle last week announced 
three new products: 

Supply Chain Exchange, 
promises to let companies 
have more flexibility in 
interactions with suppliers 


Transportation Exchange, 
promises to let users 
dynamically buy logistics 
services from suppliers 
as needed 


Product Development Exchange, 
promises to let companies 
collaborate with suppliers 
online when designing new 
products 


also formulating development, 
integration and collaboration 
framework strategies, Oracle’s 
presence should “move things 
ahead quicker,” Fontanella 
said. He added that Oracle is 
flexible about which vendors’ 
applications are used on top of 
the e-hub. D 


“A lot of people used [free] 
alternate scripting languages 
to incorporate the various 
that Macromedia 
with a database,” said 
William Thomson, CEO at 
Obsidian-Studios Inc., a multi- 
media development firm in 
Petaluma, Calif. “Hopefully, 
now we will get some support 
or documentation.” 

Randy Covill, an analyst at 
AMR Research Inc. in Boston, 
said a lack of back-end support 
for extracting, transforming 


a problem for Macromedia. “It’s 
very awkward to live without it, 
and [its lack of support] under- 
mines productivity,” he said. 
Developers also said the 
merger and its product inte- 


| gration goals could keep Mac- 


romedia competitive against 
Microsoft, which makes a uni- 
fied tool set that ties in both 
front-end and back-end devel- 


Explorer browser. 

Integrating products should 
give “developers more control 
and power over the back end,” 
said John Foulds, a developer at 
Filament Communications Inc., 
a Web development firm in Ot- 

tawa. “With Microsoft [tools], 
you have more enterprise pro- 
jects with big budgets, but with 
[this] merger, they can do the 
lower end of the market.” D 
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Feds Set Financial Security ‘Guidelines’ 


Firms asked to assess 
risks, say how they 


will be addressed | 


BY PATRICK THIBODEAU 
WASHINGTON 


Federal banking regulators last 


week issued a long-awaited set | 
of information security proce- | 


dures for 


financial services | 


firms and are calling them flex- | 
ible “guidelines” rather than | 
strict regulations. But the rules, | 
which are aimed at protecting | 


customer data, drew a mixed | 


response upon their release. 
The rules are due to take 


effect in July. But because | 


they’re designated as guide- 
lines, companies aren’t re- 
quired to follow certain proce- 
dures and can adopt security 
practices and technologies 
that they think work best, said 
John Byrne, senior counsel at 
the American Bankers Associ- 
ation in Washington. 

But Randal Baker, a vice 
president and compliance offi- 
cer at Marathon National Bank 
in Los Angeles, said bank ex- 
aminers can be tough about 














making sure that companies | 
“Unfortu- | 
nately, experience has taught | 
| me when an examiner comes, | 
the guidelines suddenly take | 
| on a new meaning — ‘guide- | 
lines are meant to be followed’ | 


follow guidelines. 


is the kind of the attitude,” he 
said. 
And the guidelines arer’t 


likely to end regulatory threats | 
on the customer-privacy issue | 


for financial service compa- 


nies, said Bill Bradway, an ana- | 


lyst at Meridien 
Research Inc. in 
Newton, Mass. 

Firms will still 
“have to prepare 
for a playing field 
where the rules are subject to 
change on the fly,” particularly 
in regard to security and pri- 
vacy, Bradway said. 

The guidelines, required un- 
der the sweeping Gramm- 
Leach-Bliley financial deregu- 
lation legislation that became 
law in 1999, call on companies 


For complete 


ey 


www.computerworld.com/security 


| in written 





in the financial services indus- 


try to prepare assessments of | 
data security risks along with | 
written plans for controlling | 
those risks. They also require | 
adjust | 
their plans to account for | 
| changes in technology. 
Last fall, executives at affect- | 


firms to continually 


ed banks, brokerages and in- 
surance companies said man- 
dating stringent security re- 


quirements, such as encrypt- | 


ing stored or transferred data, 
would increase 
costs and poten- 
tially impair data- 
sharing arrange- 


ness partners. 

Byrne said banks and finan- 
cial services companies had 
also urged federal regulators 
comments re- 
ceived last August to give 
them flexibility in providing 
administrative, technical and 
physical safeguards for cus- 
tomer records and informa- 


ments with busi- 





tion in order to avoid being 


| saddled with a “one-size-fits- 
| all” set of rules. 


“I think the agencies did a 
fine job of assessing what the 
situation is out there regarding 
information security,” said 


lines] could have been a lot 
worse than they are.” D 





The Rules 


The security guidelines asks 

financial services firms to 

have administrative, techni- 

cal and physical safeguards 

for customer records and 

information. Companies will 

be asked to take the following 

steps: 

>Risk assessment: 
Identify and assess risks. 

> Put it in writing: 
Policies and procedures for 
controlling risk are required. 

» Update: Keep pace with 
technology and threats. 

>Make sure it works: 
Implement and test the plan. 











Bush Faces His First Privacy 





Proposals from industry, advocates differ 





BY TODD R. WEISS 

George W. Bush has been pres- 
ident since only Saturday, but 
there’s already a battle brewing 
for his attention between 
groups wanting federal regula- 
tions for online privacy. 

In a letter sent last week to 
Bush, congressional leaders 
and various other federal and 
state government officials, a 
group of 17 organizations rang- 
ing from the Chicago-based 
American Library Association 
to the Electronic Privacy In- 
formation Center (EPIC), pro- 
posed a privacy-protection 
framework that they they hope 
will be enacted early this year. 

The proposal by Washington- 
based EPIC and its allies coin- 
cides — and potentially con- 
flicts — with another proposal 
made last week by the Amer- 
ican Electronics Association 
(AEA). The technology indus- 
try trade group listed eight pri- 
vacy principles it wants Con- 
gress to consider as it mulls pri- 
vacy-related legislation. 





Among the steps that EPIC 
and its supporters are seeking 
is the implementation and en- 
forcement of so-called Fair In- 
formation Practices, which 
would require companies to 
give individuals access to the 
personal information collected 
by Web sites. The supporters 
also proposed that Internet 
users be given the ability to 
correct erroneous information 
and to limit the use of the data 
that companies gather. 

The groups are also asking 
for the creation of a special 
commission to address privacy 
issues as they arise. The frame- 
work would limit new surveil- 
lance technologies and allow 
each state to develop its own 
laws, which could include po- 
tentially broader protections 
than federal regulations would 
provide. 

But such controls are seen as 
overkill by trade groups such 
as the AEA. The Washington- 
based group has reversed its 
earlier position, saying it’s now 





Challenge 


willing to accept federal priva- 
cy legislation but is lobbying 
Congress to be sure that feder- 
al laws would preempt any 
state privacy laws. 


sions for Internet users to have 
“opt-out” mechanisms, which 
prevent any information users 
provide to a company from be- 
ing used for purposes other 
than those that have 
specified up front. 


Jason Catlett, president of | 
Junkbusters Corp., a privacy | 
firm in Green Brook, NJ., and | 
one of the groups that joined | 
the EPIC letter, said the AEA | 


approach is weak. “The prin- 
ciples that they’re recom- 
mending to Congress have 


more to do with preventing | 


privacy than providing it,” he 
said. 

But AEA spokesman Marc 
Brailov defended the trade 
group’s proposal as the best 
way to protect both individual 
Internet users and e-com- 
merce businesses without 
saddling the latter group with 
excessive regulations. “Our 
approach is balanced and rea- 
soned,” he said. D 


been | 
| was even involved in the network 
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FB Closes Los Aamis 














"Hard-Drive Case 


Byrne, adding, “These [guide- | 


The FBI last week ended a seven- 
month criminal investigation at the 


| Los Alamos National Laboratory in 


New Mexico that looked into the tem- 
porary disappearance of two com- 
puter hard drives containing nuclear 


| weapons secrets. It was unable to 
determine responsibility for the dis- 
| appearance and found no evidence 


that the classified information con- 


| tained on the hard drives had been 


compromised. The drives were miss- 


| ing for 11 days last June but were 
| later found behind a photocopier. 


' Linux Worm Spreads 


| An Internet worm called Ramen is 
| spreading across Linux-based 





servers running Durham, N.C.- 
based Red Hat Inc.'s version of the 


| open-source operating system. It 
| hasn’t caused much damage yet, 


but some observers said they’re 


| worried that the self-replicating 


program - which advises recipients 
in e-mail to “eat your Ramen,” 
referring to the noodle soup - 
could ultimately cause damage to 
Web sites and home pages. 


Possible China Link 





' In Microsoft Break-in 


The AEA does favor provi- | 


New evidence has emerged that the 
QAZ worm reportedly used to break 


| into Microsoft Corp.’s networks in 


October communicated with an 


| e-mail account in China. Microsoft 


hasn't confirmed that the QAZ worm 


intrusion, which was discovered in 
October and reported to the FBI. But 
a report issued by security consult- 
ing firm LogiKeep Inc. in Dublin, 
Ohio, said QAZ communicated with 
an e-mail account in Beijing. 


‘Mafiaboy’ Pleads Guilty 
The teen-age computer hacker 
known as Mafiaboy pleaded guilty 
last week to 55 of 66 counts of 
mischief in connection with last 
year’s denial-of-service attacks that 
crippled several major Web sites. 
The attack brought down the Web 
sites of CNN.com, Yahoo Inc., Ama- 
zon.com Inc., eBay Inc. and others 
last February. The boy had previous- 
ly pleaded not guilty to all charges. 
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FedEx Picks Simple ‘Text 


Messaging in Europe 





Expands mobile package tracking function 


BY BOB BREWIN 
AND MATT HAMBLEN 


PARIS 
NABLE TO acquire 
the frequencies it 
needs to build the 
kind of extensive, 
private wireless 
data network it operates in the 
U.S., FedEx Corp. has started 
to roll out a digital dispatch 
and tracking system in Europe 
based on a popular wireless 
messaging service. 

That system brings mobile 
package-tracking to parts of 
FedEx’s European operation 
for the first time. Previously, 
drivers communicated with 
dispatchers by phone and 
logged packages when they 
reached a facility. 

The mobile system is based 
on simple text messaging tech- 
nology called Short Message 
Service (SMS). It’s commonly 
used in Europe by teen-agers 
who send data messages to one 
another’s cell phones. 

It’s also not compatible with 
the proprietary systems FedEx 
uses in the U.S., so the Mem- 
phis-based company is rolling 
out different hardware in Eu- 
rope. The company developed 
a rugged truck-mounted termi- 
nal from Husky Computers 
Ltd. in Coventry, England, run- 
ning Microsoft Corp.'s Win- 
dows CE operating system. 

FedEx’s U.K.-based regional 
IT director Grahame Ritchie, 





| speaking at the company’s Eu- 


ropean hub at Charles de 


| Gaulle airport here, said the 


SMS system “mimics” the 
functionality of the propri- 
etary system that FedEx uses in 
the U.S. 

Once a European FedEx dri- 
ver scans a package’s bar code 
into his handheld computer, he 
transmits the information via 
an infrared port to the courier 
communications (CoCo) ter- 
minal in his truck. CoCo then 
transmits the data through the 
European cell phone network 
into the company’s long-haul 





network and then into the 
FedEx mainframe in Memphis. 
Ritchie said the SMS net- 


| work provides “about the same 
| throughput, 9.6 bit/sec.,” as pri- 


vate packet data networks. 


Rolling Out CoCo 


FedEx started rolling CoCo 
out in Germany last year and 
plans to eventually deploy it 
throughout Europe, except for 
greater Paris and the U.K. 
There, the company has been 
able to use capacity on com- 
mercial packet data networks. 

Nigel Deighton, a Gartner 
Group Inc. analyst based in 
London, called SMS the “most 
reliable” of the data services 
available on the European 





AT A GLANCE 


European 
Operation 


Highlights of FedEx’s new 
wireless network in Europe: 
= Uses mobile phone network Short 
Message Service channels for dispatch 
and package information network 

= Uses new vehicle terminals based on 
Windows CE 

® Mimics the private data network and 
terminals FedEx uses in U.S. 





Global System for Mobile 
(GSM) telephone standard. 
SMS can get through when a 
voice call can’t because it runs 
over the network signaling 
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channel, he said. It also stores 
and forwards messages. 

SMS messages dominate 
GSM data traffic and have 
enormous popularity, growing 
from 1 billion per month in De- 
cember 1999 to more than 15 
billion per month by the end of 
last year, Deighton said. 

But Ken Dulaney, an analyst 
at Gartner, said, “The biggest 
problem [with SMS] is that the 
packet size is 160 [characters], 
and there is no guarantee that 
the messages are received in 
the order they are sent.” How- 
ever, since package-tracking 
and _ dispatch applications 
don’t require the transmission 
of large amounts of data, SMS 
can probably handle such nar- 
rowband messages, Dulaney 
added. 

Ritchie said FedEx evaluated 
Palm Inc.’s operating system 
and Linux in addition to Win- 
dows CE. The company opted 
for Windows CE “because it is 
much easier to write applica- 
tions to,” he said. D 





BMW Makes Push Into Telematics Market 


Some cars to have 
Web-enabled phone 


BY LEE COPELAND 
Bayerische Motoren Werke 
AG (BMW) entered the tele- 
communications market last 
week, rolling out a cellular 
phone with advanced features 
as standard equipment on its 
high-end luxury vehicles. 

At the Detroit Auto Show, 
the Munich, Germany-based 
automaker announced that all 
of its 7 Series vehicles now 
come equipped with the BMW 
CPT 8000 digital phone. 





The digital phone offers 
voice recognition and hands- 
free calling through steering- 
wheel or radio controls. The 
phone supports both Time Di- 
vision Multiple Access and 
Code Division Multiple Access 
(CDMA). The CDMA version 
also comes equipped with an 
Internet browser. The CPT 
8000 comes with an armrest 
cradle that allows the driver to 
access phone numbers and 
personal data from the phone 
through the vehicle’s audio 
system. 

Rob Leathern, an analyst at 
Jupiter Research in New York, 
said in-vehicle communica- 


tions, or telematics, are be- 
coming standard options on 
most vehicles. “In [the] future, 
as the technology gets cheaper, 
we'll see a wider range of de- 
vices that are equipped to 
serve multiple environments, 
{not just inside the vehicle],” 
said Leathern. 

Detroit-based General Mo- 
tors Corp., for example, offers 
its OnStar in-vehicle commu- 
nications system on 32 of its 
vehicle lines. More than 1 mil- 
lion vehicles are equipped 
with the telematic service, and 
the automaker predicts that 
more than 4 million vehicles 
will carry OnStar by 2003. 





Time Warner Telecom to 
Double Network Capacity 


BY JAMES COPE 

In a move spurred by an ever- 
increasing appetite for busi- 
ness bandwidth, Time Warner 
Telecom Inc. and Lucent Tech- 
nologies Inc. signed a $100 mil- 
lion deal last week to deploy 
Lucent’s latest optical net- 
working technology across 





parts of the Time Warner Tele- 
com network. That network is 
a competitive local exchange 
carrier in which AOL Time 
Warner Inc. in New York holds 
a 47.5% stake. 

Joe Mambretti, director of 
the International Center for 
Advanced Internet Research at 





Northwestern University in 
Evanston, Ill., said the band- 
width demand is being driven 
by an increasing number of 
networked applications, such 
as streaming media. Only opti- 
cal technologies can satisfy 
that demand, he said. 

The new Lucent system will 
be installed in Littleton, Colo.- 
based Time Warner Telecom’s 
western regional network. It 
uses advanced dense wave divi- 
sion multiplexing to double the 
bandwidth on the telecommu- 
nications company’s current 





optical fiber infrastructure. 

Murray Hill, NJ.-based Lu- 
cent said the system can deliv- 
er rates of 800G bit/sec., and it 
can be upgraded to accommo- 
date 1.6T bit/sec. 

Time Warner Telecom said 
the new technology will be ap- 
plied to much of the network it 
recently acquired for $690 mil- 
lion from the bankrupt GST 
Telecommunications Inc. in 
Vancouver, Wash. Deployment 
of the optical system should be 
completed by the middle of 
this year, Lucent said. D 





BMW developed the CPT 


| 
8000 with Motorola Inc. in 


Schaumburg, Ill. It’s based on 
Motorola’s Timeport phone. 

In related news, GM also an- 
nounced last week that it 
would integrate voice recogni- 
tion technology from Nuance 
Communications Inc. into its 
OnStar system. GM plans to 
utilize Menlo Park, Calif.- 
based Nuance’s software as 
part of its Virtual Advisor ser- 
vice that delivers Web content 
to drivers via voice-activated 
commands. 


Safety First 

Adding voice activation in 
vehicles tackles a major hurdle 
in the development of in-vehi- 
cle communications systems, 
said Thilo Koslowski, an ana- 
lyst at Gartner Group Inc. in 
Stamford, Conn. 

“The voice-activation part 
has always been the challenge 
for telematic suppliers be- 
cause of all the extraneous 
noise in a_ vehicle,” said 
Koslowski. “In order to [safe- 
ly] make use of all the devices 
and services in the car, you 
have to be able to control them 
by voice.” 

The CPT 8000 will also be 
available at an additional but 
not-yet-determined price on 
2001 BMWs as a dealer-in- 
stalled option by the end of 
March. D 








| VERITAS SAN Solutions. 
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Blackouts Slow Utility 
Company Web Site 


Amid rolling blackouts in California 
last week, users trying to reach the 
Web site of San Francisco-based 
Pacific Gas & Electric Co. (PG&E) 
for updates had to use more elec- 
tricity waiting for the page to down- 
load, as response times rose more 
than 150% on Jan. 17. At its nadir, 
PG&E's home page took more than 
21 seconds to load, according to 
Keynote Systems Inc. in San Mateo, 
Calif., which measures Web site 
performance. 


America Online Grabs 
WAP Microbrowser 


America Online Inc. said last week 
that it will develop and market a 
Netscape Communications Corp.- 
branded microbrowser based on the 
source code of the Wireless Access 
Protocol (WAP) microbrowser from 
Espoo, Finland-based Nokia Corp. 
Dulles, Va.-based AOL's version of 
the WAP browser will support the 
company’s AOL Anywhere strategy 
of making content available on a 
range of devices in addition to PCs. 








J.P. Morgan Goes 
Virtual for Payments 


J.P. Morgan Chase & Co. said last 
week that it will roll out its elec- 
tronic invoice presentment and 
payment system to more than 1,000 
of its commercial banking clients by 
July. The New York-based company 
piloted the system with a handful of 
Fortune 500 wholesale banking 
clients. 





Sun Says Cobalt RaQ 
To Complement Netra 


Sun Microsystems Inc. announced 
plans for its new Linux-based 
Cobalt RaQ 4 server to complement 
its low-end Netra line, which uses 
Sun’s Solaris operating system. The 
company said it expects its new In- 
ternet appliance, which includes 
Linux 2.2 and Apache and uses an 
Intel Corp. processor, to ship early 
next month at a starting price of 
$1,299. Sun also introduced a new 
Netra server with a starting price of 
less than $1,000. 


| partners 
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Lotusphere attendees offer peers advice 


BY JENNIFER DISABATINO 


AKE BUENA VISTA, FLA 


HILI 
Development 
Corp.’s main 


LOTUS 


message at 
Lotusphere 
here last week was centered on 


knowledge management (KM), | 


users were busy counseling 


one another on migrating to | 
Notes RS5 and were only begin- | 
ning to contemplate the instal- | 


lation of KM systems. 

One vice president of mes- 
saging at a large U.S. bank said 
he was at Lotus’ 
conference 
first time. He said he chose to 
attend specifically to talk to his 
counterparts in other corpora- 


for 


tions about their R5 migration | 


experiences. 


The best part of the confer- 


| ence, the bank executive said, 


| 


| 
| 
| 
| 


was feedback from companies | 


such as Irving, Texas-based 
Exxon Mobil Corp., which de- 
cided to standardize on Notes 
as a messaging and collabora- 


users and | 
the | 


tion platform the 
merger of the two oil giants. 


Frank Bustraen, 


following 


Attendees 


vice president of Royal Philips | 


Electronics NV in Amsterdam, 
and David Price, senior group- 
ware architect at ABN Amro 
Bank NV, an international bank 


also based in Amsterdam, said | 


they have had some experi- 
ence with large-scale RS mi- 
gration projects. Royal Philips 
completed its migration as part 


| Redbooks, which are technical 


of its year 2000 remediation | 


work; ABM Amro’s project is 
still under way. 


Each firm has hundreds of | 
mail servers in centers around | 


the globe for tens of thousands 


of users, and each had to mi- | 


grate users from more than 


one e-mail system. Both com- 


| panies said it was critical to | 


have staff dedicated solely to | 
the project and to invest in | 


hardware upgrades. 


Price said he reduced ABN | 
Amro’s downtime to one-four- | 
teenth of what it used to be. | 
But hardware was key to get- | 





Embedding Collaboration: 
Not Just a Technical Issue 


The next step for collaboration 
software, many IT managers at 
Lotusphere said, is to embed com- 
ponents into line-of-business tools 
like customer relationship man- 
agement (CRM) and enterprise re- 
source planning (ERP) applica- 
tions. But the move to embed may 
be as much a political issue as it is 
a technical one, as managers at 
user companies strive to defend 
their application turf. 

Lotus is forming partnerships 
so resellers and other vendors can 
develop applications using Lotus 
collaboration products such as 
Notes, Domino, Sametime and 
QuickPlace. 

According to Lotus officials, 
Notes RNext, the successor to R5 
that's scheduled for release later 
this year, will be increasingly mod- 
ular - constructed so pieces of the 
application can be taken out and 
embedded into other applications. 





Sametime and QuickPlace are 
similarly modular. 

Frank Bustraen, vice president 
of corporate IT at Royal Philips 
Electronics, is using QuickPlace 
for collaboration outside the fire- 
wall with partner companies. He 
said he would really like to merge 
some QuickPlace features into 
Royal Philips’ CRM and ERP appli- 
cations. “You need this intercon- 
nection,” he said. “Now [my co- 
workers] are starting to discover 
that. They now recognize that 
components are lacking.” 

Bustraen said he can even do it 
in-house. “With a little bit of cod- 
ing, it can work,” he said. 

The problem, Buestran said, is 
that the Royal Philips manager re- 
sponsible for CRM and ERP appli- 
cations is reluctant to risk losing 
control of his domain. “There are 
political repercussions,” he said. 

- Jennifer DiSabatino 





| Planning, Educating Are Key 


Tis: While Lotus Pushes 
Users Focus on R5 M 


ting there, he added. 

“A couple of PCs under a | 
desk doesn’t count,” Price said. | 
“A lab for interoperability test- | 
ing is not a nice-[to]-have but a | 
must-have.” He also suggested | 
that R4 and RS5 servers have | 
duplicate server names during | 
the testing process. 

According to Price, most of | 
the information that users will | 
need when migrating is avail- 
able through publications like 


resources from IBM. And ap- 
parently, that’s a good thing. 
“With minor exceptions, I 
am not going to praise Lotus 
support,” Price said. “[But] we 
got enough benefit to make 
that [lack of support] not | 
enough of an issue ... to pre- | 
vent us going forward [onto | 
R5].” 
Price also said a replication | 
monitoring tool from Welles- 
ley, Mass.-based DYS Analytics 
Inc. has made monitoring the 





| software much easier because | 


it shows replication traffic on 
one screen for all ABM Amro 
servers around the globe. 


Reiner Gratzfeld, manager 


| of worldwide communications 
| products at Henkel KGaA in | 
| 


Dusseldorf, Germany, has also | 


| used the DYS Analytics tool. 





Henkel was able to better plan 
its migration to RS because the 
tool identified how much traf- 
fic was going to and from 
Domino servers, he said. 
According to Bustraen, plan- 
ning was key to the project, 
and educating users was key to 
implementation. “There is one 
time in life when we like to be 
changed by others, and that is 
when we have wet diapers. 
Otherwise, people have resis- 
tance to change,” he said. 
According to Price, users are 
particularly attached to mes- 
saging applications — espe- 
cially the user interface — be- 
cause they involve social inter- 
action. Users are more likely to 
complain when their messag- 
ing application changes than 
they would, say, when con- 
fronted with a Microsoft Word 
upgrade, Price said. He recom- 





mended telling users up front 
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’ 


igration 


about the limitations of the 
messaging application, because 
they will eventually find out. 
RNext, the successor to RS, 
will be available for public beta 
testing in about three months, 
according to Lotus officials. D 


Fastest Cable 
Underseas 
Announced 


BY JAMES COPE 

London-based Cable & Wire- 
less PLC announced last week 
that it will string a 13,000-kilo- 


| meter cable system under the 


Atlantic Ocean between the 
U.S. and Europe. 

The two-leg cable, named 
Apollo, will handle Internet 
protocol traffic at up to 3.2T 
bit/sec. One leg will carry data 
between the U.S. and the U.K. 
and the other between the U.S. 
and France. The cable is ex- 


| pected to be operational by the 


summer of next year. 

The new cable will best to- 
day’s fastest U.S.-to-Europe 
submarine link, which is owned 
and operated by London-based 
Flag Telecom Holdings Ltd. 
and, according to Cable & 
Wireless, is rated at 2.4T bit/ 
sec. on each of its two legs. 

Cable & Wireless has con- 
tracted with Alcatel in Paris to 
build the network at a cost of 
$442 million, plus an unspeci- 
fied investment from Alcatel. D 


CABLE & WIRELESS will string a 
13,000-km. trans-Atlantic cable. 
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Auto-Supply Exchange 
‘Targets Small Guys, ‘Too 


Johnson Controls to launch marketplace 
for design collaboration and bidding 


BY LEE COPELAND 
F THERE'S ONE 
the cost-cutting technol- 
ogy initiatives of old in- 
dustry manufacturers, 

it’s managing an extensive sup- 

ply chain that includes thou- 
sands of companies. 

That’s why 
trols Inc., 
car parts and environmental 
systems, is launching a design 
and collaboration business-to- 


Johnson Con- 


business exchange for its auto- 
motive suppliers, said Mike 
Suman, group vice president 
for e-business and marketing 
at Johnson Controls. 

Johnson Controls said it 
wants to replace homegrown 
product development software 
with an online exchange that 
will address both the bidding 
process with suppliers and the 
management of the design col- 
laboration aspects of develop- 
ing a product. E-commerce 
software from MatrixOne Inc. 
in Chelmsford, Mass., will 
form the bulk of the technolo- 
gy infrastructure 

“We're looking at replacing a 
legacy system that doesn’t add 
value,” said Suman. “But you 
can’t take a new piece of soft- 
ware, tack it onto an old busi- 
ness model and produce the re- 
sults that you want.” Suman 
will also update its financial 
system and reduce paper-based 
transactions with suppliers. 


Beefy Competition 

But the new exchange, 
scheduled to go online in 
March, also puts the manufac- 
turer in competition with the 
Big Three automakers, which 


are three of its biggest cus- | 


tomers. They already have a 


massive $200 million auto in- 


dustry exchange in Southfield, 
Mich.-based Covisint LLC. 
Milwaukee-based Johnson 
Controls last year generated 
$6.8 billion in revenue, or 40% 


factor | 
that threatens to hamper | 


| Covisint 


a manufacturer of | 


| travel technology gi- 


of its total, from contracts to 
build car interiors, seats and 


batteries for DaimlerChrysler | 


AG, Ford Motor Co. and Gen- 


| eral Motors Corp. 


Johnson Controls will use 
for 
with the Big Three but didn’t 
want to wait for Covisint to 
gain industry momentum and 


its 


interactions | 


start courting smaller suppliers | os 
| Versatility Advantage 


Another reason for building | 


to its marketplace, Suman said. 

“The Tier 1 suppliers don’t 
want to wait to see if Covisint 
will work out as the sole mar- 
ketplace for the industry,” said 
Thilo Koslowski, an analyst at 


Travel site credits 


| ad revenue, low cost 


to acquire customers 


BY MICHAEL MEEHAN 
While many dot-coms have be- 
come wreckage on the e-com- 
merce highway, online travel 
agency Travelocity.com 
last week announced that it ex- 
pects to be “at or close to prof- 
itability” by the end of the sec- 


Inc. 


| ond quarter — six months ear- 
added that Johnson Controls | 


lier than previously predicted. 
Fort Worth, Texas-based 


| Travelocity added that 


it’s forecasting prof- 
itability for the year as 
a whole. The compa- 


ny’s success mirrors 


| the strength of the on- 


line travel industry 


| overall, in stark con- 
| trast 


to the woes of 
other Internet busi- 
nesses. 

Travelocity, which 


QUARTER 


Gartner Group Inc. in Stam- 
ford, Conn. “The automakers 
only want to deal with the big 


struction, 


suppliers, but in order to get to | 
| efficiencies, you have to work 


with more than that.” 

Driveshaft and 
maker Dana Corp. is also build- 
ing a private exchange to work 
with its 86,000 suppliers. The 
Toledo, Ohio-based manufac- 


piston-ring 


turer, which drummed up 33% | 


of its revenue — $3 billion — 
from sales to Ford and Daim- 
lerChrysler, will also work with 
the Covisint exchange. 


its own exchange: Johnson 


Controls draws 60% of its rev- 


enue — $10.2 billion — work- 


ing with customers in the con- 


per share, for the fourth quar- 


| ter of last year, down from $3 
million, or 16 cents per share, | 
| dot-coms,” Punwani said. 





the previous quarter. 
Its gross travel bookings in 
the quarter ended Dec. 31 


dustry record of $696.4 mil- 

lion, up from $389.7 million in 

the same period of 1999, 
Ramesh Punwani, Traveloci- 


ty’s chief financial 


energy and aero- 
space industries. Building a 
private exchange may assist 
the company with those sup- 
pliers as well, said Kevin 
Prouty, an analyst at AMR Re- 
search Inc. in Boston. 

“They’re not just an automo- 
tive company,” Prouty said. “So 
they have a vested interest in 
not tying themselves solely to 
one exchange.” 

But Johnson Controls isn’t 


| alone in being stuck between 


a major business-to-business 


| exchange and a hard place. 


Dofasco Inc., a $2 billion com- 
pany that manufactures steel 
for the construction, packag- 
ing and automotive industries, 
is in a similar situation. The 
Hamilton, Ontario-based steel 
maker owns an equity stake in 


Travelocity Predicts Profit Six Months Early 


“Truthfully, we’ve been a lit- 
tle dismayed that we’ve been 
lumped in with these other 


| Billions in Bookings 


reached an online travel in- | 


For last year as a whole, 
Travelocity recorded $2.5 bil- 
lion in gross travel bookings. 


| The company’s rival, Bellevue, 
| Wash.-based Expedia Inc., is 


officer, | 


pointed to strong advertising | 


revenue and lower customer- 


acquisition costs due 


| expected 
to | 


greater name recognition as | 


key reasons for accelerating 
the profitability predictions. 


GROSS 
TRAVEL 
i=Tele} 4), ick-) 


NET LOSS 
ad ed 


38 cents 


due to report its fourth-quarter 
financial results today and is 
to approach the 
$2 billion mark for annual 
gross bookings. 

Expedia lost just $1.6 million 
in last year’s third quarter but 
warned that it would 
likely lose more than 
that in the fourth 
quarter because 
expenses related to a 
new marketing cam- 
paign. 

Meanwhile, Orbitz, 
anew online ticketing 
site funded by the five 
largest U.S. airlines — 
American, United, 





is majority-owned by 


26 cents 


Delta, Northwest and 
Continental is 





ant Sabre Inc., nar- 


16 cents 


scheduled to make its 





rowed its net loss to 
$900,000, or 5 cents 








5 cents 


debut in June. But 
Punwani said Trave- 


of 


| 
| 
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Johnson’s 


Value Chain 


Johnson Controls plans to build 
a B2B exchange for suppliers. 

m The exchange will use software from 
MatrixOne 

@ The online transaction system will 
address the bidding process with suppliers 
and design collaboration aspects of devel- 
oping a product 


= Johnson's platform will integrate with 
the platform being developed by Covisint's 
online procurement exchange. 


E-steel.com, a steel industry 
business-to-business exchange, 
but may also join Covisint. 

“I can see us belonging to 
multiple exchanges,” said 
Doug Buchanan, manager of 
e-business at Dofasco. “It’s a 
fact of life. Covisint is not go- 
ing to buy steel for the packag- 
ing or other industries, but just 
for automotive purposes 
and that’s just one segment [of 
our business].” D 





locity officials don’t expect 
that to have any impact on the 
company’s drive toward prof- 
itability. 

“There’s plenty of room for 
other competitors,” he said. 

According to numbers com- 
piled by online travel research 
firm PhoCusWright Inc. in 
Sherman, Conn., there were 
only $3.6 billion in gross online 
travel agency bookings in 1999 
— a number Travelocity and 
Expedia bested in just three 
quarters of last year. 

“This is a real business — 
one where companies are go- 
ing to turn a profit,” said David 
Provost, an analyst at Wal- 
tham, Mass.-based Gomez Ad- 
visors Inc. “The online travel 
industry is not going to suffer 
the same fate as so many other 
dot-coms.” 

Meanwhile, Fort Worth- 
based Sabre last week reported 
a $32.1 million fourth-quarter 
profit, down from $41.7 mil- 
lion in the same period in 1999. 

The profit figure, which 
doesn’t take into account sev- 
eral one-time expenses, was 
said to have been affected by 
Sabre’s October acquisition 
of Menlo Park, Calif.-based 
rival GetThere Inc. and its 
spin-off last February from 
American Airlines Inc. owner 
AMR Corp. 3 
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More Dot-com Layoffs 


The latest victims in a long series of 
layoffs at news-oriented Web sites 
worked at NBC Internet Inc. Late 
last week, San Francisco-based 
NBCi said it was cutting its revenue 
projections by one-third, to $100 
million, which will result in 150 lay- 
offs, or 30% of the staff. These lost 
jobs will be added to the more than 
43,000 layoffs that have occurred 
in the Internet market during the 
past year. According to Zona Re- 
search Inc. in Redwood City, Calif. 
even with steadily increasing lay- 
offs, the Internet employment 
downturn represents only 0.7% of 
those unemployed in the U.S. 


Microsoft Meets 
Lowered Estimates 


Microsoft Corp. reported financial 
results for its fiscal second quarter 
that were in line with a reduced- 
expectations warning issued last 
month, adding that it remains 
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Presidential Librarians 
Prep for IT Challenges 


Archivists face millions of papers, e-mails 


BY MARK HALL 


| 
| 
| 


OW THAT 
dent Clinton has 
left the Oval Of- 
fice, aides say he 
will be spending 


| a lot of his time on his presi- 


| dential library. Yet a big part of | 
| the challenge belongs not to | 
him but to the IT staff that | 
must grapple with a volume of | 


work and incompatible IT sys- 
tems that will make it nearly 
impossible to fully catalog his 


| administration. 


| of the President 


Skip Rutherford, president 
Clinton Li- 


| brary Foundation, opened the 


“guarded” about how the short-term | 


economic outlook will affect PC de- 
mand and overall technology spend- 
ing. Microsoft had a profit of $2.62 
billion on revenue of $6.59 billion in 
the quarter ended Dec. 31, but the 
latter figure was roughly 6% below 
its original plan. 


PCs, Macs Stumble 


Gateway Inc. last week announced 
it would lay off 10% of its workers 
after previously revealing much 
lower profits on decreased revenue 
for its fourth quarter. The San 
Diego-based company also set low- 
er expectations for growth, at least 
through the first half of this year. 
Apple Computer Inc. said its loss for 
the most recent quarter reached 
$195 million on a sales shortfall of 
more than $600 million. Apple CEO 
Steve Jobs expressed optimism for 
business in the current quarter. 


Staffing Changes 


VIGNETTE CORP., a supplier of 
electronic-business applications, 
confirmed Friday that it has cut 
about 450 jobs, or 15% of its work- 
force, to reduce operations cost. 

.. . TechNet, a technology advoca- 
cy group. in Palo Alto, Calif., has 
named former Rep. RICK WHITE (R- 
Wash.) its new CEO. 








| said Michelle Cobb, an analyst | 


door this week to his opera- 
tion’s temporary location in 


Little Rock, Ark. However, the | 
initial batch of hard-copy ma- | 
terials available to the public | 
will barely be the tip of the | 
massive information iceberg | 


from the two-term Clinton ad- 
ministration. 


“We have 40 million e-mail | 
Rutherford | 
said. “The sheer volume of in- | 
formation from the Clinton ad- | 


messages alone,” 


ministration is partly due to 
technology advancements.” 


Quantity of information is | 


only the beginning of the prob- 
lems for Clinton librarians, 


| at the College Park, Md.-based 


Office of Presidential Li- 


braries, which is part of the | 


Presi- | 





National Archives. She said 
more than 100 independent 
systems in the executive 
branch must be migrated to a 
common platform. 
Compounding the migration 
problem is that the systems 
themselves become part of the 


presidential record, according | 
| make sure all the messages are 
| accounted for and that the con- 
text is maintained,” Cobb said. 


to Jenny Sternaman, an archi- 
vist at the Ronald Reagan Li- 
brary in Simi Valley, Calif. 

To comply with the mandate 
of the National Archives to re- 
tain the records of its govern- 
ment, Sternaman and 
archivists need to employ indi- 
viduals who can run outdated 


technology. But archivists also | 
need to move data from long- | 


Continued from page 1 


Federal IT 


Bush, the former governor of 
Texas, is also bringing in a | 
team that has advocated priva- | 
| in that city and who has won 
| national awards for delivering 


tizing state services and using 
e-government to improve ser- 
vice and shrink staffs. 


In Texas, IT outsourcing is | 
well above the average for all 
| released a study saying that 
| e-government initiatives could 
| lead to savings of $1.2 billion in 


states. In fiscal 2000, outsourc- 
ing expenditures represented 
29% of the state’s total IT bud- 
get, compared with a nation- 


wide average of about 18%, ac- | 


Gillette Outsources All Sites 


BY JULEKHA DASH 


| nounced it will consolidate all 


| in Santa 


| sites, 


hosting and operations man- 


agement of its global Web sites | 
this year, relying on two out- 
| tion in northern Virginia. 


sourcing vendors. 

Exodus Communications Inc. 
Clara, Calif., now 
hosts 12 of the company’s Web 
while Redwood City, 
Calif.-based Certainty Solu- 
tions Inc. provides systems 
monitoring, network services 
and enhanced site perfor- 


| mance, said Jim Easton, direc- 
The Gillette Co. in Boston an- | 


tor of enterprise applications 
at Gillette. He said he expects 
the vendors to eventually host 
and operate all 25 of Gillette’s 
Web sites from a central loca- 


The goal is to ensure more 
consistent service levels 
across the company’s sites, 
Easton said. 

“It’s a common reason for 
turning to an outsourcer to 
deal with a management is- 
sue,” said Joel Yaffe, an analyst 


other | 





retired systems to a modern, 


| readable common format. 


Currently, the idea is to 


make all the information avail- 
| able via a browser. But it’s not 


as simple as scanning in docu- 
ments or putting a Web front 


| end on mainframe data, archi- 


vists said. It’s about providing 
context, which can be particu- 
larly daunting for electronic- 
based documents. 

“It’s an amazing prospect to 


She said some online files 


| use graphical information sys- 


tems. Portions of these GIS 
files are frequently printed or 
e-mailed and dispersed among 
users. Tying these partial doc- 
uments together in the context 
of the entire GIS file is a com- 


| cording to a report last year by 
| the Texas Department of Infor- 
mation Resources. 

Moreover, a top IT adviser | 
| to Bush is former Indianapolis 
| Mayor Stephen Goldsmith, a 
Republican who was a leader | 


in privatizing many IT services 


| e-government services. 


Last month, Texas Comp- 
troller Carole Keeton Rylander 


two years. The plan would dis- 
continue requirements for 


| at Giga Information Group Inc. 
| in Cambridge, Mass. 


Once the management of its 


| sites is centralized, Web visi- 


tors getting information about, 
for instance, Gillette’s Braun 


line of products, which are de- 


veloped in Germany, would re- 


| ceive the same service level as 
| those who go to the site of 


Gillette’s U.S.-based Duracell 
unit. 

“When you have content de- 
velopers scattered around the 
world, a company wants to put 
a consistent face forward to its 
public,” said Counse Broders, 
an analyst at Current Analysis 
Inc. in Sterling, Va. D 
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= Hundreds of data 
formats and systems 


= Technical talent is 
needed to keep old 
systems working 


® Millions of documents 
need to be turned into 
electronic files 


® Millions of e-mails 
need to be indexed in 
context 








plex, time-consuming task. 

Even if context can be real- 
ized, the indexing or archiving 
of it seldom occurs without the 
help of requests made under 
the Freedom of Information 
Act (FOIA), said Sternaman. 
She said her crew is able to 
handle only searches based on 
FOIA requests. As a result, she 
estimated that a mere 15% of 
the library has been indexed 
after 12 years. D 


face-to-face interviews to de- 
termine Medicaid eligibility 
and use call centers and Inter- 
net applications to improve the 
enrollment process. 

Darrell West, director of the 
Center for Public Policy at 
Brown University, said he be- 
lieves Bush will be a strong 
proponent of e-government 


| services. “It is an area that of- 


fers potential to enhance ser- 
vice delivery at lower cost, so 
it fits perfectly into his politi- 
cal agenda,” West said. 

Joseph Leo, CIO at the U.S. 
Department of Agriculture and 
a 34-year federal employee 
who plans to leave his post 
soon, said federal CIOs haven't 
had the advantages that pri- 
vate-sector CIOs enjoy be- 
cause many senior federal offi- 
cials still don’t recognize the 
importance of IT in service de- 
livery. CIOs have been hurt by 
a lack of budget authority, he 
said, adding that a federal CIO 
can act as an “honest broker,” 
raising the profile of IT issues 
in the federal government. 

“There is an acknowledg- 
ment and recognition that the 
information technology com- 
ponent is essential for the 
company’s well-being and, in- 
deed, success. In the public 
sector, that is not yet recog- 
nized,” said Leo. D 








Bring the world of global business within your reach 


These days, your business has to be a global e-business. Global | 
so you cant 2 better de ons and make t ) r. Sprint unde 
help boost productivity. With Sprint global data solutions, you'll benefit from t 
formance provided by our acclaimed global network for J rnet, intr t, extrar 
and mis critical data. Sprint has the flexible data solutions >ked by dependable cus ler SUPPC 
»mpany's remote offices — including international locations — for maxim 
Stic and international data solutio san not only meet your busin 


keep pace as your enterprise grows Ob Ne're giving you the ability 
y F e g Q \ y 


Let’s make contact: 


Experience Sprint Global Data Solutions at www.sprintbiz.com/data_solutions or call 1 877 203-7263. 


> Sprint 


The point of contact 


NEWS 


Spending Slowdown Unlikely 
To Squelch IT Vendor Plans 


Users and analysts say they’re confident | 
that vendor plans will remain unchanged | 


BY JAIKUMAR VIJAYAN 
NALYSTS AND 
they’re 
that 
major server 


users say 
optimistic 

the 

vendors will stick 

to their product schedules this 
year, despite a predicted slow- 
down in corporate IT spending. 
Major enterprise hardware 
vendors such as Sun Microsys- 
tems Inc., Hewlett-Packard Co. 
and IBM have either just start- 


ed shipping or are slated to | 


ship major upgrades to their 
technologies this year. 

Though some of these ven- 
dors have warned of weak de- 
mand in the coming months, so 
far has announced any 
plans to slow or defer its prod- 
uct rollouts as a result. 

“I am not concerned at all 
[about vendors delaying prod- 
ucts this year],” said Dan 
Kaberon, a parallel sysplex 
manager at Hewitt Associates 
LLC, a Lincolnshire, Ill.-based 
human resources outsourcer. 

Hewitt has just placed or- 
ders for six of IBM’s new 64-bit 
mainframes, which started to 
ship late last month. Kaberon 
said Hewitt plans to upgrade as 
needed through the year. 


none 


‘Brighter Chrome’ 

“In fact, when things 
slow down that vendors push 
much harder to show some- 
thing that has the longer fin 
and the brighter chrome,” 
Kaberon said. 

Such sentiments come at a 
time when corporate users are 


it’s 


getting ready for some major 
product migrations. All of the 
server vendors have recently 
announced significant refresh- 
es to their technology and are 
expected to ramp up to full pro- 
duction this year (see chart). 

“These are all infrastructure 
products that are budgeted for,” 
said Joyce Becknell, an analyst 
at Boston-based Aberdeen 
Group Inc. “I can’t imagine a 
vendor saying they are going to 
delay rolling them out.” 

Other products expected in 


| global IT 


2001 are new servers based on | 


Intel Corp.’s upcoming Itani- 


| um chip — the first of its new 


IA-64 family — from all major 
vendors of Intel hardware. 

“I don’t see vendors holding 
back anything,” said Bob Suth- 


| erland, an analyst at Technolo- 


gy Business Research Inc. in 
Hampton, N.H. 


| 
That’s because doing so will 
| only 


the market ad- 
vantage to other vendors in an 
already tight situation, accord- 


concede 


ing to analysts. 


Spending slowdowns 





| 
are | 


part of the challenge of being a | 


Hudson, a global marketing di- 


Continued from page 1 


Unions 


| turn, unions aren’t well-suited 
| to the needs of technology 


workers and will only exacer- 
bate their problems. 

Lew Brown, Etown’s presi- 
dent and chief operating offi- 
cer, contends that unlike 
unions, which have a “political 
agenda,” he cares about his em- 
ployees’ jobs and well-being. 

Poh said unions can’t pre- 


[Unions] 
are not terribly 
flexible when 
it comes 
to making 
changes for the 
workforce or 
customer base. 


PATTY SMITH, SPOKESWOMAN, 
AMAZON.COM 


vendor, said Mark 





Hardware Wish List 


Enterprise hardware scheduled for volume shipment by major 


aria eee 
Sun’s UltraSPARC 


Starcat: A successor to the 


ill-based 
current E10000, the server will support between 74 and 105 
CPUs. As many as four Starcats can be clustered together to 


act as a single computer. 


potion stow aw wheres Yen waa 64-processor 
and software-based 


server featuring hardware- 


with failure isolation functionality and support for up to 


128GB of memory. 


IBM's Z/900: First 64-bit mainframe from IBM. Supports 
up to 16 processors and delivers up to 2,500 MIPS perfor- 


mance. It features dynamic 
thousands 


load balancing and support for 


of virtual servers in one box. 








rector at HP. In that sense, the 
current U.S. isn’t 
very different from the Asian 


slowdown that HP faced some 


slowdown 


vent layoffs, nor is it their in- 


tention to put anyone out of 


business. But as dot-coms feel 
the financial squeeze, labor is 
the first to go, Poh said. 
Workers with a 
bargaining agreement, howev- 
er, can choose to have salaries 
cut or reduce the workweek as 
an alternative to layoffs 
That might have 
workers at Stamford, 
based research company Walk- 


collective 


helped 
Conn.- 


| er Digital. On Jan. 11, Connecti- 


cut Attorney General Richard 
Blumenthal filed a federal law- 
suit against the firm, claiming 
that it failed to provide ade- 


106 workers in November. 


| Other Organizing Efforts 


The Etown.com situation is 


only one of several efforts un- 
| der way to organize high-tech 


| vice representatives at 


workers. In October, the Wash- 
ington Alliance of Technology 


Workers (WashTech) began a | 
| $97 million to 8,000 temporary 
Ama- 


drive to organize customer ser- 


zon.com Inc.’s headquarters. 
“If dot-com workers are con- 
cerned about job security, ad- 
vancement and training, now 
is the time to talk about this 
with co-workers,” said Wash- 
Tech organizer Gretchen Wil- 
“Once you are [laid off], 
Since the 


son. 
you are powerless.” 





time ago, Hudson added. “Any- 
time there is a slowdown, you 
need to step back and look 

the basics and make sure you 


Amazon.com union drive be- 


| came public, customer service 


representatives haven’t been 
required to work mandatory 


| Overtime, even during the holi- 


day season, she said. 

But Amazon.com _ spokes- 
woman Patty Smith denied that 
the union drive has had any im- 
pact on Amazon's day-to-day 
operations. She said there was 
no mandatory overtime during 
the holidays because the com- 
pany had enough incentive 
programs to entice volunteers. 


“Amazon needs to be flexible | 
in order to innovate on behalf 
| of customers and employees,” 
quate notice before laying off | 


she added. “[Unions] are not 
terribly flexible when it comes 
to making changes for the 
workforce or customer base.” 
WashTech also led the in- 
dustry’s most visible effort to 
organize technology workers 
in its lawsuit against Microsoft 
Corp. Last month, Microsoft 
announced that it would pay 


workers and their attorneys, 
who charged that the software 
vendor should have offered the 
temps the same stock option 
benefits as regular employees. 
But despite layoffs and the 
economic downturn, most IT 
workers would gain little from 
unions, since they receive good 
pay and benefits, critics argue. 





| off in October 
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understand what customers 
| really want,” he said. “But there 
will be no change in HP’s prod- 
uct plans as a result.” 

“Nothing has changed,” 
agreed Lynn Thorsen-Jensen, a 
director of strategic marketing 
for Compaq Computer Corp.'s 
high-end server business. The 
market slowdown may lead to 
a re-evaluation of demand-cre- 
ation and awareness-generat- 
ing campaigns, but it won’t re- 
sult in any product delays or 
changes, Thorsen-Jensen said. 
“The [high-end] markets we 
are focused on are moving for- 
ward strongly,” she said. 

“If anything, vendors are 
only likely to roll them out 
faster” to gain any advantage 
they can in a depressed spend- 
ing environment, she said. 

Any cost-cutting measures 
by vendors are likely to affect 
marketing and sales efforts in- 
stead of product and support, 
Becknell said. D 


MORE 


For more on the effects of an economic 
slowdown on IT, see page 30. 





Michael Berch, who was laid 
as IT director at 
Internet Pictures Corp. in Oak 
Ridge, Tenn., said that until re- 


| cently, most technology work- 
ers didn’t fear layoffs because 


they figured they could easily 
find another job. 

But in the past month, Berch 
said, as the pace of job cuts has 


| quickened, there has been an 


“undercurrent of discontent 
among a lot of junior people 


[who were] enticed to Silicon 


| Valley by dot-coms.” 


However, Berch added, the 
atmosphere at many dot-coms 
is so informal and collegial that 
workers who joined a union 
could alienate co-workers and 
managers with whom they are 
friends. 

“T think it’s very risky” to 
unionize high-tech workers, 
agreed Challenger Gray CEO 
John Challenger. “These com- 
panies can ill afford a union 
movement that pushes up their 
employment costs.” 

Union officials acknowledge 
that organizing high-tech work- 
ers meets some resistance. 

“There is a tremendous 
amount of fear about speaking 
about workplace issues” among 
high-tech workers, said Wash- 
Tech’s Wilson. But, she added, 
“There are few places for peo- 
ple in high-tech to turn to.” D 
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Web Mortgages May Be Due 
For a Comeback This Year 


Lower rates expected to spur interest 


BY MARIA TROMBLY 
AST SPRING, Compa- 
nies like Mortgage.- 
com promised to 
revolutionize the 
process of borrow- 

ing money to buy a house by 

making the 
quicker and cheaper. 


process easier, 


But by the end of the year, | 


the company officially 
dead, and its Web address was 
bought by ABN Amro Mort- 
gage Group Inc. in Troy, N-Y., 
a subsidiary of Amsterdam- 
based ABN Amro Holding NV. 

Although there were fears 
that Mortgage.com’s 
demonstrated that mortgages 
were, in fact, too complex to 
sell over the Internet, analysts 
now argue that online mort- 


was 


gages may be poised to take off 


this year due to more familiar- 
ity with the Internet and the 
recent cut in interest rates. 
According to George Barto, 
an online banking analyst at 


Group Inc., Mortgage.com’s 
failure simply demonstrates 
that it couldn't the 
downturn in the economy — 
not that people are unwilling 
to buy mortgages online. 


survive 


Net-Enabled Home-Owning 
According to a 
1,674 home owners and renters 
commissioned by Washington- 
based mortgage services com- 
pany Fannie Mae last summer, 
28% of Americans would defi- 
nitely or probably use the In- 
ternet to get a home mortgage, 
and 32% would consider it. 
About 4% of recent home buy- 
ers applied for mortgages on- 
line, according to Fannie Mae. 
And a recent forecast from 
the Mortgage Bankers Associa- 
tion of America estimates that 
the rate for a 30-year fixed-rate 
mortgage this year will drop to 
7.5%, compared with 8.1% last 
year. The number of refinanc- 
ings is expected to increase 
with that interest rate drop. 
Milt Riseman said he’s ready 
for an increase 
tomers — but he doesn’t know 
quite when they'll show up. 


in new cus- 


| demise, 


closing | 


survey of | 


Riseman is chairman of the 
consumer mortgage group at 
American Business Financial 
Services Inc. in Bala Cynwyd, 
Pa. The 12-year-old company 


| owns the Upland Mortgage | 
Web site, which currently sees | 


a couple of million dollars per 


month in business — out of $45 | 


million to $50 million total. 

But a good number of online 
start-ups lacking that tradi- 
tional base couldn’t survive. 


In addition to Mortgage.com’s | 


Homespace.com, 


Dairy.com to use 
spot-market model 
for perishables 


| BY JAMES COPE 
Stamford, Conn.-based Gartner | 
| as whole milk and cream can 
| go sour when buyers and sell- 


Deals for dairy products such 


ers can’t find each other and 
quickly match up their needs. 
But officials at Dairy.com, a 
business-to-business exchange 
for the dairy industry that’s 
owned and operated by Mo- 
mentX Corp. in Dallas, said 
that problem will soon change. 


| The company announced last 
week that within the next two | 


to three months, Dairy.com 
will add functions that will 
enable dairy product produc- 
ers and processors to buy and 
sell raw dairy products using a 
spot-market model. 

Currently, such spot-market 


transactions for liquid dairy | 


products such as skim milk and 
cream are made through phone 
calls and faxes, said Jeff Mako- 
hon, vice president of solu- 


| tions at MomentX. He said the 
| system is fraught with ineffi- 


ciencies, which is a problem 


| because dairy products have to 


be delivered and used while 
they’re fresh. 
Dairy.com, which MomentX 


| chief technology officer Greg 


Bott said would be managed 





Loanz.com, Onloan.com and 
eJumbo.com folded or decided 
to get out of the market. 
Promises of huge cost sav- 
ings through automation 
haven’t come true for the on- 
line-only sites because of high 
customer 


acquisition costs, 


according to analysts. 


Few Pure-Plays Left 
That leaves only a few pure- 
play online mortgage compa- 


said Barto. “The amount of on- 
line lending is not declining — 


| only the number of 


players dividing up 
that business,” he 
said. 

The other types of 


| companies that sur- 


| vived 


| tomers an 


nies still standing, including | 


E-Loan Inc. in Dublin, Calif., 
and LendingTree Inc. in Char- 
lotte, N.C. The consolidation 
may be good for the industry, 


| other industries, the 
| brick-and-clicks 


last year’s 
shakeout are the tra- 
ditional firms that 
now offer their cus- 
online 
channel. And, as in 


ap- 
proach to mortgage sales may 
be the most successful, said 


THE DAIRY INDUSTRY is hungry for the efficiencies that an online 
exchange could bring, say Dairy.com officials and other observers. 


and hosted by network out- 
sourcer Digex Inc. in Beltsville, 
Md., will use a matrix of crite- 
ria that buyers and sellers can 
use to find each other and 
complete a transaction in a 
matter of minutes. Those crite- 
ria include product type, 


| grade, butterfat content, load 


size, shipping and receiving lo- 


| cations, price and a variety of 


other requirements. 


Anonymous Matching 
“Everything takes 
anonymously until a good 
match is made,” Bott said. Only 
then, he explained, will one 


| can also screen out companies | 
| senior vice president of indus- 


they prefer not to do business 


| with, Bott said. 


Several dairy companies, in- 


| cluding Kraft Foods Inc. in 


Northfield, Ill., Land C’Lakes 
Inc. in Arden Hills, Minn., and 
the Suiza Foods Corp. in Dal- 
las, developed the concept and 
founded the exchange. 

But dairy industry officials 
said the exchange didn’t suc- 


| ceed until the founders spun it 
| off in a merger with Dallas- 


place | 


| party become visible to the | 
| other. Users of the exchange 


based Inc2inc Technologies 
Corp. in December, creating 
MomentX. 

Inc2inc operates food ingre- 
dient and packaging exchange 
Inc2inc.com and had the tech- 


RISEMAN: He’s 
ready for clients 
but not sure when 
they'll come. 
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analyst Aaron McPherson at 
Framingham, Mass.-based IDC. 
“It needs to evolve more 
organically from an existing, 
stable business.” 

Another part of the mort- 
gage life cycle is the secondary 
market, of which about $16.5 
billion is expected to be traded 
online this year, McPherson 
said. The secondary 
market is where 
mortgages are bun- 
dled and sold to third 
parties. 

This amount could 
jump _ significantly, 
McPherson added, if 
McLean, Va.-based 
Freddie Mac and 
Fannie Mae, which 
collectively control 
the vast majority of 
this market, move 


| their acquisition processes 


online. D 


nology in place to run Dairy.- 
com, said Steve Gackenbach, 
director of joint ventures at 
Kraft Foods. 

Gackenbach said he believes 
the exchange will help stream- 
line the dairy business. Today, 
a dairy product manufacturer 
that needs a truckload of 
cream may have to make a lot 
of phone calls to find a suppli- 
er that has the right product 
quality at the right price and 
that can ship it in a timely man- 
ner, Gackenbach said. 

“T may link up with a suppli- 
er that’s 1,000 miles from my 
facility, not knowing there’s a 
potential supplier offering the 
same product only 500 miles 
away,” Gackenbach said. 

“[Dairy.com] will give people 
in the dairy industry more real- 


time market visibility of how 


much milk, cheese or cream is 
out there,” said Marty Devine, 


try relations at Suiza Foods. 


Opportunity for Success 

Patrick Duparcgq, professor 
of e-commerce at the Krannert 
School of Management at Pur- 
due University in West Layfay- 
ette, Ind., said that for online 
exchanges like Dairy.com to be 
successful, they have to per- 
form functions that aren’t 
adequately performed through 
existing means. 

That opportunity seems to 
exist in the dairy industry, 
Duparcg noted, which he said 
could make Dairy.com an 
“Internet natural.” D 
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~ NEWS 


Florida Voting Problems Open Door for System Vendors 


BY PATRICK THIBODEAU 

The Florida voting fiasco is 
turning into an opportunity for 
bring 
electronic systems to market. 
But election officials say the 


some big vendors to 


solution to the problem is 
much more than a point-and- 
click away and that major ob- 
stacles confront the vendors. 
Microsoft Corp., Dell Com- 
puter Corp. and Unisys Corp. 
said they plan to develop an 
electronic voting system that 
would cover every aspect of 
the process, including registra- 
tion, identification, voting and 
tabulation. IBM is also consid- 
ering developing such systems. 
Many states use antiquated 
voting technology 
punch cards and mechanical 
voting lever machines because 
replacing that equipment is ex- 
pensive and not a high priority 
when compared with other 
needs, say election officials. 
New York, for instance, has 
estimated the cost of replacing 
its voting lever machines with 
touch-pad electronic systems 
at $100 million, according to 
Lee Daghlian, a spokesman for 
the New York State Board of 
Elections. 
“If money weren't an issue, 
New York City would have 
[changed over] a long time 


such as 


ago,” he said. 


Resolve, Then Build 


Congress will consider legis- 
lation this year that would 
make federal funds available 
for election reform. Hearings 
are expected, but much re- 
mains up the air. 

Kevin Curry, a vice presi- 
dent at Blue Bell, Pa.-based 
Unisys, said the companies 
won't be able to deploy any 
new system until they see what 
elections standards Congress 
and federal officials set. One 
question, for example, is 
whether officials will allow the 
use of smart cards. These stan- 
dards will determine what 
kinds of systems are possible, 
said Curry. Until all the issues 
are sorted out, “it would be 
ridiculous to build something,” 
he said. 

Election officials are eyeing 
the changes warily. 

Julie Pearson, an auditor and 
elections supervisor for Pen- 
nington County, South Dakota, 
said she wants to see vendor 
diversity in any case, partly be- 
cause of security issues. To be 


able to fix an election, some- 
one would have to know “the 
details of every state law [and] 
of every system that is being 


used in every state before they 

could do that,” Pearson said. 
Any new electronic system 

has to have an open architec- 


nding IT expertise 
your organization 
is easy. 


ture capable of interoperating 
with other electronic systems, 
said Deborah Phillips at the 
Voting Integrity Project, an Ar- 
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lington, Va.-based group that 
studies voting rights and tech- 
nology issues. 

“If all you are doing is plug- 
ging in new equipment, then 
all you are doing is changing 
the set of problems,” she said. D 
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NEWS | 


High-End Linux Clusters Will Serve Scientific Applications 


BY TODD R. WEISS 
IBM and the National Center 
for Supercomputing Applica- 
tions (NCSA) last week an- 


| nounced plans to build a pair 


of high-performance Linux 


clusters that will 


provide | 


for use in scientific 


applica- 


tions. 
A Pentium-based system is 


month at the NCSA at the Uni- 
versity of Illinois at Urbana- 
Champaign. A companion set- 


2 TFLOPS of computing power 


scheduled to be installed next 
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up using Intel Corp.’s upcom- 


| users. 


| IBM’s deep computing 


29 


ing 64-bit Itanium chip is 
scheduled to follow in the sum- 
mer. Together, the two clusters 
will consist of almost 700 IBM 
servers running Linux. 

Dan Reed, director of the 
NCSA, said the machines will 
provide the processing power 
that researchers will need to 
further analyze Albert Ein- 
stein’s theory of relativity and 
to conduct other scientific and 
engineering queries. These 
projects include simulating the 
violent collision of black holes 
and the gravitational 
they produce. 

“You could solve these prob- 
lems on your desktop [com- 
puter], but you may have to 
wait 10,000 years to get the an- 
swer,” Reed said. 


waves 


Hundreds of Servers 

The initial cluster will in- 
clude 512 of IBM’s eServer x330 
thin servers, each equipped 
with two 1 GHz Pentium III 
processors and Research Tri- 
angle Park, N.C.-based Red Hat 
Inc.’s version of Linux. 

Plans call for the Itanium- 
based system to be outfitted 
with 160 servers that will run 
Brisbane, Calif.-based Turbo- 
Linux Inc.’s version of the 
open-source operating system. 

The two systems will be 
linked using cluster intercon- 


| nect technology developed by 


Myricom Inc. in Arcadia, Calif. 

Dave Gelardi, director of 
Linux 
cluster group, said the comput- 
er maker hopes the work being 


| done at the NCSA and other 


supercomputing sites will 
eventually lead to Linux-based 
applica- 
tions for MORE ‘= 
corporate 

ONLINE ‘cdays fio ssnay 
; issues, visit our Web 
“It’s our 


| intention 


to take this 

work and move it into com- 
mercial [settings],” Gelardi 
said, listing Web servers and 
collaborative computing sys- 
tems as possible avenues for 


| the technology. 


The NCSA’s plans follow the 


| announcement of several other 





Linux-based supercomputers 
and high-performance clusters 
in recent months. For example, 


| the oil exploration unit of the 


Hague-based Royal Dutch/- 
Shell Group last month an- 
nounced that it is working with 
IBM to build a system that will 
link 1,024 servers to analyze 
seismic data as part of the 
search for new sources of oil. D 
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THE MYTHICAL FIVE NINES. 99.999%. AS CLOSE TO PERFECT 


For a server operating system, the five nines are a measure of reliability that translates into just over 
five minutes of server downtime per year.* Of course, rumors of this 99.999% uptime usually start 
under ideal lab conditions. But where are these five nines when your company needs them? If you’re 
using Microsoft® Windows® 2000 Server-based solutions, they may be closer than you think. Today 
Starbucks, FreeMarkets and MortgageRamp, an affiliate of GMAC Commercial Mortgage, are using 
Windows 2000 Server-based systems that are designed to deliver 99.999% server uptime. With 
system architecture improvements for higher server uptime plus fault-tolerant and redundant systems 
for increased availability, the Windows 2000 Server platform is helping these companies maximize 


of availability is dependent on many factors outside of the operating system. including other hardware and software technologies, mission-critical operational processes and professional services. © Z 





AS YOU CAN GET WITHOUT BREAKING SOME LAW OF NATURE. 


uptime and minimize network interruptions. But a server OS alone doesn’t get you five nines, which is 
why we’ve teamed up with industry-leading system providers to ensure that the right combination of 
people, process and technology is utilized. Industry leaders such as Compaq, Hewlett-Packard, Unisys, 
Stratus and Motorola Computer Group can work with you to deliver solutions with up to five nines uptime 
with their custom-built Windows 2000 Servers shipping today. Of course, not all installations require 
this level of reliability, but one thing is for sure: The Windows 2000 Server family can help you get 

to the level of reliability you need, even five nines. To learn more about server solutions you can 

count on, visit microsoft.com/windows2000/ servers 
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Compaq, Intel Contribute to $115M Investment in Stratus 


BY JAIKUMAR VIJAYAN 


| Capital Partners Inc. in Stratus 
. . . | 
The recent $115 million invest- 


Technologies is part of an ef- 


ment made by Compaq Com- | fort to help the maker of fault- | 


puter Corp., Intel Corp.and DB | tolerant computing systems 


significantly expand its market 
reach and presence. 


The Swiss company has also | 


reached technology collabora- 
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tion agreements with Compaq 
and Intel. Under the agree- 
ments, Compaq will license 
and use Stratus’ fault-tolerant 


| Computerworld’s 
| Code of Ethics 


1. Computerworld’s first priority is the interest of its readers 

2. Editorial decisions are made free of advertisers’ influence. 

3. We insist on fair, unbiased presentation in all news and articles. 
4. No advertising that simulates editorial content will be published. 


| 5. Plagiarism is grounds for dismissal 
| 6. Computerworld makes prompt, complete corrections of errors 


7. Journalists do not own or trade in computer industry stocks. 
8. No secondary employment in the IT industry is permitted 


| 9. Our commitment to fairness is our defense against slander 
| 


10. All editorial opinions will be clearly labeled as such 





WORDS WE LIVE BY. 


When you pick up a copy of Computerworld, 
you know you're getting the most objective, 
unbiased news and information in IT. Our 


code of ethics guarantees it. 


Why do we make such a big deal out of 
editorial integrity? 


Because the words you read in Computer 
world often have a dramatic impact on your 
business, your career, and your future. 


You use this information to evaluate new 
products. To get a candid view of emerging 
technologies. To find out the inside story on 
corporate strategies. To decide whether to 
jump ship or stay in your current job. To get 
the edge on your competition. 


In short, Computerworld is filled with the 
words IT professionals like you live by. 


MORE MANAGERS 
MONITOR E-MAIL 





=. 


| HOLDINGIT 
ACCOUNTABLE 





Worbs YOU WoRK By. 


Week in and week out, our editors and reporters 
call it the way they see it - on issues ranging 
from network management to reengineering. 
They dig deeply to bring you the most accurate, 
comprehensive news in IT. 


It’s no wonder over 250,000° IT professionals 
subscribe to Computerworld. Shouldn't you? 
Order today and you'll receive 51 information 
packed issues. Call us at 1-800-552-4431, or 
visit us on the World Wide Web at http: 
www.cwsubscribe.com. 


You'll get the kind of straightforward, impartial 
reporting you can work by. You have our word 
on it. 


COMPUTERWORLD 


THE NEWSPAPER FOR IT LEADERS 


Publisher's own data as of 5/3100 





technology in upcoming serv- 
er products, according to Stra- 
tus President and CEO 
Stephen C. Kiely. Meanwhile, 
Intel and Stratus will work 
closely to optimize Intel tech- 
nology for fault-tolerant com- 
puting, Kiely said. 


Boosted Presence 

Announced two weeks ago, 
the partnerships should help 
Stratus boost its presence in the 
market, Kiely said. 

“We are today a $320 million 
company in an industry domi- 
nated by companies 100 times 
our size,” Kiely said. “We con- 
cluded that our maximum im- 
pact and value delivery to our 
customers will occur when we 
become part of the product 
stream of a major industry 
player.” 

Besides the agreement with 
Compaq and Intel, Stratus al- 
ready has a licensing relation- 
ship with NEC Corp. in Japan. 

Though such licensing deals 
will form a core part of Stratus’ 
sales strategy going forward, 
the company will also continue 
to make and market servers 
under its own brand name, 
Kiely said. 

The strategy makes sense 
for Stratus and its customers, 
said John Enck, an analyst at 
Gartner Group Inc. in Stam- 
ford, Conn. 

“Stratus has been struggling 
to find its rightful place in the 
new market” with its fault- 
tolerant technology, Enck said. 
Because 
Stratus is 
relatively 
small, its 
products 
“were pret- 
ty much guaranteed to be 
niche products that would ap- 
peal only to a small segment of 
users,” he said. 

The partnerships with Com- 
paq and Intel should help 
change that perception, Enck 
noted. 

The $115 million investment 
will be made in the form of a 
preferred stock purchase. The 
shares will be acquired from 
Investcorp SA, a global invest- 
ment company with offices in 
New York, London and Bah- 
rain. Investcorp is the majority 
shareholder in Stratus. 

Stratus and Investcorp will 
retain majority interest and 
voting control of the company 
following the conclusion of the 
transaction, which is expected 
to be completed by Feb. 1, ac- 
cording to Kiely. D 


visit our Web site. 


MORE (or r0e ino 
ONLINE (niuses nos, 


www.computerworld.com/more 


RRS 8 POOR a = 








COMPUTERWORLD January 22, 2001 





it 
EMC Shuffles Execs 


Hopkinton, Mass.-based storage 
vendor EMC Corp. last week an- 
nounced management changes that 
gave it a new CEO and a chairman. 
EMC founder Dick Egan stepped 
down as chairman of the board to 
become chairman emeritus; he will 
be succeeded by Mike Ruettgers. 
Former chief operating officer Joe 
Tucci has filled Ruettgers’ slot as 
CEO and president. 




















NorthPoint Files 
For Chapter Tl 


Seven weeks after being sent into a 
financial tailspin by Verizon Com- 
munications’ termination of a pro- 
posed merger deal between the two 
companies, struggling digital sub- 
scriber line (DSL) service provider 
NorthPoint Communications Group 


Inc. last week announced that it has | 
| Inc., are resorting to layoffs to 
| cut costs in the months ahead. 


filed for Chapter 11 bankruptcy pro- 
tection. The San Francisco-based 
company said it will try to sell off 
virtually all of its assets. 





Motorola Trims 
U.S. Manufacturing 


Schaumburg, Ill.-based Motorola 
Inc. last week said it would cease 
manufacturing at its Harvard, Ill., 
cellular phone plant around June 
30, resulting in the termination of 
2,500 manufacturing jobs. The re- 
maining 2,500 employees at the 
Harvard site will provide customer 
order fulfillment and other support. 
A company executive said the clo- 
sure resulted because the company 
couldn't “competitively manufac- 
ture products when there is surplus 
global capacity at Motorola’s lower- 
cost sites” in other countries. 





L&H Replaces CEO 
With Belgian Exec 


Embattled software vendor Lernout 
& Hauspie Speech Products NV 
(L&H) last week announced that 
Philippe Bodson, a Belgian execu- 
tive who's also a member of that 
country’s senate, will serve as CEO. 
He replaces CEO John Duerden, 
who will remain as director of the 
firm. No reasons were given for the 
ousting of Duerden from the leper, 
Belgium-based firm. 





NEWS! 


Analysts See Rough Year 
Ahead for Hardware Firms 


| Job cuts, lowered expectations cast shadow 


BY JAIKUMAR VIJAYAN 


ONCERNS over the 
economy, 


| particularly high-end boxes 


com- | 


bined with a slow- | 
down in demand | 


from dot-com companies and 


particularly | 
| 14% in 


application service providers | 
— threaten to make this a diffi- | 
cult year for hardware makers, | 
| drop from 28% in 2000 to 5% | 


analysts said. 


Major hardware 


vendors | 
| such as Hewlett-Packard Co. | 


and Compaq Computer Corp. | 


pectations for the year, citing 
reduced demand for their 
products. And some, such as 
Gateway Inc. and Motorola 


Among the major players, 


| only IBM appears to have re- 


mained untouched so far. The 
company last week slightly 
beat market expectations when 
it announced earnings of $2.7 
billion on revenue of $25.6 bil- 
lion. Its broad technology port- 
folio may have spread out the 
impact of any hardware de- 
cline, helping the company 
make its numbers, analysts said. 
But analysts aren’t sure what 
the slowdown means for users 
in terms of new products and 
support from other companies. 
In the short term, they expect 
vendors to go ahead with prod- 
ucts that have already been an- 
nounced, but technologies fur- 
ther down the road could get 
pushed back. There also could 
be a reduction in the number 
of product models to keep sup- 
port costs down, analysts said. 


Dot-com Aftermath 

However, most major prod- 
ucts are still on schedule. Sun 
Microsystems Inc., for in- 
stance, is on track to start ship- 
ping its UltraSPARC III prod- 
ucts later this year. HP recently 
started shipping its Superdome 
server, and IBM is on track 
with its 2900 mainframes. 

New York-based Merrill 
Lynch & Co. is predicting 
that spending on _ nearly 
every class of server — and 


| have already lowered their ex- | 





— will slow down during the 


Sutherland, an analyst at Tech- 


| nology Business Research Inc. 


next two years. The increase | 


in growth for Unix-based ma- 


in Hampton, N.H. 

Fred Halperin, a managing 
director at Miami-based IT ser- 
vices firm Answerthink Inc., 
estimated that nearly one-third 
of hardware sales during the 


chines, for instance, will drop | past two years or so have come 


from 28% in 2000 to 
2001, while 
demand for servers 
such as the OS/390 
and AS/400_ will 


in 2001, according to a recent | 


report from the company. 
“There was a burgeoning de- 
mand for hardware caused by 


the growth of the Internet over | 


from Internet compa- 
nies building their IT 
infrastructures. 
Similarly, an ongo- 
ing consolidation in 
the application service pro- 
vider market — another big de- 





| mand-generator in the past 


the last few years that has now | 


begun to slow down,” said Bob 


two years — should impact 
hardware demand in the near 


future, predicted Laurie Mc- | 
Cabe, an analyst at Summit | 


Strategies Inc. in Boston. 


Reinforcing these economic 
predictions are concerns over 
a much closer scrutiny of IT 
budgets among corporate buy- 
ers, analysts said. 

“The slowdown 
much less significant than in 
the e-world, but all hardware 
investments are being put 
through a more rigorous cost- 
justification and ROI process,” 
Halperin said. 

There are already indica- 
tions that a slowdown has be- 
gun. Just last week, chip maker 
Intel Corp. predicted a 15% 
drop in first-quarter sales be 
cause of a slowdown in PC 
spending and economic uncer- 
tainties. It said that its research 
and design budgets wouldn't 
be affected, however. D 


here is 





Layoffs Show 


BY JULEKHA DASH 
As the number of failed dot- 
coms continues to climb, so do 
the number of consulting firms 
announcing layoffs. 

Earlier this month, Dallas- 
based Perot Systems Corp. said 
that it will eliminate 200 jobs 


as part of a restructuring, and | 


Cambridge Technology Part- 
ners Inc. announced that it has 
cut 280 jobs, following its 400- 
person layoff last October. 

“A lot of layoffs have derived 


from a similar problem: firms | 


staffed up to do more work 
than they currently have,” said 
Joshua Randall, an analyst at 
Fitzwilliam, N.H.-based Ken- 
nedy Information Research 
Group. 

Technology services — in- 
cluding consulting — was one 
of the the top industries to an- 
nounce layoffs during the last 
three months of 2000, accord- 
ing to Chicago-based outplace- 
ment firm Challenger Gray & 
Christmas Inc. 

Analysts blamed the woes 
on the slowing economy in ad- 
dition to the loss of dot-com 
clients. 

“In an uncertain economy, 
companies pull back on discre- 
tionary spending,” which 
means cutting the budget for 








Consulting Cuts 


Consulting firms that have 
announced layoffs in 2000: 


>Scient Corp. 
» Viant Corp. 


»iXL Enterprises Inc. 








services such as advertising | 
| freelance writing for online 


and consulting, said Randall. 


In spite of the industry’s | 


shakeout, recruiters say con- 


sultants and IT staff who have | 
been laid off can still find plen- | 
| ty of opportunities. 


| Opportunity Still Knocks 


Jim Fields was laid off from | 
his job as associate director of | 
Cambridge Technology’s Mia- | 
mi office in October after eight | 
years with the firm. Soon after- | 
ward, he received two offers | 


from smaller consulting firms 
founded by former Cambridge 
Technology employees. Fields 
now works at Fort Lauderdale, 
Fla.-based consulting firm 
Semtor Inc. 

But, he noted, some of his 
friends who remain at Cam- 





Climate in Consulting Sector 


bridge Technology are still 
worried about their positions. 
“T like to think that Cam- 
bridge will survive once it gets 
down to the right size and 
makes the same cuts to its 
management structure as to 
its consulting force,” he said. 
Noreen Compton was laid 
off from Cambridge Technolo- 
gy last month as a creative pro- 
ducer for the company’s Web 
site and said she believes “con- 
sultancy work is shaky” now. 
Compton, who is doing some 


services, is looking for work as 
a project manager or producer 
at larger technology companies 
and Fortune 500 firms. 

Bruce Gonzalez, associate di- 


| rector of Atlanta-based recruit- 


ing firm Matrix Resources Inc., 
said consultants with technolo- 
gy skills can land positions at 
software firms that are similar 
to their previous contract posi- 
tions. And those with a mix of 
management and technical ex- 
pertise can find work as project 
managers at small and large 
brick-and-mortar firms, he said. 

“Consultants still have their 
pick of jobs,” said Gonzalez. 
But, he added, these days, they 
may be mulling three or four 
offers, vs. five or six a year ago. D 
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How easy is it to grow your storage capacity with Dell | PowerVault 705N Storage 
Dell? The easy to install, cost effective PowerVault 
705N Network Attached Storage (NAS) unit deliversgimm 
reliable and scalable storage. It’s as simple as ong 
two...well, you get the point. ‘ 





New Plug and Go 
Rackable Storage 


Little Big Iron: 

Dell™ PowerVault™ 705N Storage with an 
Intel® Pentium” processor. It’s 1U tall and 
120GB* strong. 


Plug and Go: 

Multiplatform connectivity and file sharing 
in 15 minutes. The perfect gift for any work 
group or remote office. 


Less Than Three Cents a Megabyte: 


Starts at $2 ,699 


Buy it: 
At WWW.DELL.COM 
or call 1-800-508-DELL 


. 800.508.DELL 
Instant storage, made easy with Dell WWW.DELL.COM 





MARYFRAN JOHNSON 


Global Catch-22 


VERYTHING I READ about the globalization of IT and busi- 
ness leads me to conclude that it’s the IT equivalent of Mis- 
sion: Impossible. There are substantial barriers everywhere 
you look: cultural, political, regulatory, infrastructural, 
technical and human ones. 


So, it can’t be done. Yet there it is, 
swiftly taking shape as the Next Big 
Thing for companies doing business 
on the Web. In our cover story last 
week (aptly titled “Global Land- 
mines”), we called it “an inescapable 
force in business — one that can 
boost your career or leave you be- 
hind.” Easy for us to say, huh? 

A CEO friend who works with 
CIOs at multinational companies 
points out that “global” has become 
shorthand for anything that isn’t lo- 
cal or in your time zone. “The way to 
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limited, wireless is immature and in- 
frastructures are a mess. There are 
no international standards for invoic- 
ing, exchanging data or performing 
some of the most basic business 
functions electronically. 

On the plus side, an increasing 
number of countries are racing to 
make legal and infrastructure im- 
provements to attract foreign busi- 
nesses. “The trend is to deregulate 
and basically open up to the forces of 
globalization,” observes Bruce Mc- 
Connell, the former White House of- 


com. 








think of global business,” he says, “is 

that it’s outside your normal realm of under- 
standing. It becomes 24-hour and multicultural. 
Once that happens, you'd better have an organi- 
zation that reflects that kind of behavior.” Of 
course, few organizations do. 

Consider the technology problems that a 
worldwide business encounters today. Telecom- 
munications support overseas is uneven at best 
and may cost 10 times what a similar service in 
the U.S. does. The hardware and software under- 
pinning your native e-business, the prime mover 
for globalization, seldom match their capabilities 
abroad. So you end up dealing with multiple 
firms that are strangers to you. Bandwidth is still 


ficial who led the International Y2k 
| Cooperation Center and now heads up his own 
international consulting fizm. But the corporate 
| and cultural problems remain daunting, ranging 
from language barriers and IT talent shortages 
to a regulatory nightmare of tax codes, privacy 
laws and security concerns. 

So what’s an IT leader to do, given this global 
catch-22? The best starting point is awareness. 
Once you start thinking globally, you'll be asking 
different questions of your vendors and looking 
for different skills in your employees. Just start 
tapping into the problem-solving mind-set that 
got you interested in IT in the first place. The 
world awaits you. D 
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PIMM FOX 


ERP Could Be 
‘Answer to Calif. 
Power Crisis 


F YOU'RE READING this, it means the 

lights didn’t go out in Silicon Valley 

when I wrote it. The California Inde- 
pendent System Operator, which runs 
the electricity grid out here, has warned 
that the state is in a Stage 3 emergency, which 
means it should prepare for rolling blackouts. 

The immediate issue is the inability of South- 
ern California Edison and Pacific Gas & Electric 
to pay for the power they resell to businesses and 
consumers. 

And while some blame increased Internet us- 
age for current electricity woes, a fundamental 
problem is a lack of IT resources to more effec- 
tively use existing power. 

The state’s power indus- 
try needs to spend money 
on an enterprise resource 
planning (ERP) structure 
that allows information to 
flow not only inside power 
companies in California, 
but also among those 
throughout the region and 
into customers’ compa- 
nies, in the same way elec- 
tricity travels through the 
regional power grid. 

One identified problem 
is shutting down power generators for routine 
maintenance without first knowing that another 
plant might be shutting down, too. This lowers 
the supply of electricity, pushing up costs. And a 
cold winter across the country has also hurt sup- 
ply. But it shouldn’t take an electricity and natural 
gas emergency to address IT needs. 

During the first two weeks of last month, sig- 
nificant electricity shortages occurred in Califor- 
nia after several power plants voluntarily shut 
down for scheduled maintenance, emissions con- 
cerns and breakdowns without alerting officials 
at other plants. This cut the state’s electricity pro- 
duction, forced utilities to shop for power outside 
the region and placed greater demands on operat- 
ing facilities. Additionally, with a limited pool of 
trained utility workers, there needs to be a 
greater coordination of resources. 

Using a collaborative ERP approach could re- 
duce some of these conflicts. 

The problem is that ERP has been supplanted 
by the rush to e-business technology. Transform- 
ing a business into an e-business is a great idea, 
and some proponents of utility deregulation spec- 
ulate that trading power via the Internet should 
help utility customers. But it doesn’t remove the 
hurdles to improving ERP systems in the industry. 

First, there are no ERP systems designed to de- 
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liver information both inside and outside a utility | 
company’s walls. Second, a collaborative resource 
planning package would be expensive, and it 

would be difficult getting utilities and power op- 
erators to link together. And it isn’t always clear 
when payback will come. 

Critics of California’s power companies have 
been quick in their opposition to rate hikes. Utili- 
ties asked for a doubling of rates, though so far 
only a 10% temporary increase has been granted. 

But these increases will be spent on purchasing 
electricity, not on solving the twin issues of build- 
ing more power plants and using IT to wring the 
most out of existing ones. 

The high construction costs of a new plant may 
suddenly make a new ERP system seem down- 
right affordable. D 


JOHN GANTZ 


How to Pick and 
Choose in the 
New ASP World 


T’S TIME FOR my annual column on 

application service providers (ASP). 

This isn’t just because I’ve been 
widely quoted in the media recently as 
saying they will disappear (and need to 
explain myself) but also because the collapse of 
the dot-com sector raises questions about all IT 
market segments feeding off those successive 
rounds of capital. 

The real story about ASPs is that some will dis- 
appear, others will be acquired and many more 
will adjust their business models to make up for 
the collapse of their dot-com customers and to 
deal with customers’ changing needs. And a lot of 
hype will disappear. 

The ASP business model has always looked 
good on paper: Let some- 
body else buy and manage 
complex enterprise appli- 
cation packages while you 
go about running or sup- 
porting your core busi- 
ness. Indeed, the No. 1 rea- 
son early ASP users chose 
that model, according to 
IDC research, was so they 
could “focus on core busi- 
ness.” The second was to 
cut down on application 
implementation costs. 
ASPs would make money 
based on economies of scale centered around ap- 
plication expertise and infrastructure investment. 

But if any ASPs thought that all that customers 
wanted was access to software owned by some- 
one else — dial-an-app, if you will — they were 
mistaken. The problem that users really want 
ASPs to solve isn’t one of software ownership but 
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one of integration with other applications. Some 


NEWS OPI 


of these other applications will be in the ASP’s 
product set, with more, probably, in the user’s 
own environment. 

As a result, the basic ASP business model will 


| morph from one of renting software access to one 
| of delivering services. This changes how compa- 
| nies will make money in the business. 


IDC research conducted last fall, in which early 
adopters were interviewed, confirms this. The 
choice of services offered by ASPs ranked higher 
in importance among early adopters than did 
which applications the ASPs supported. Having 
contractual service-level agreements ranked No. 
1, with integration services ranked second. What 
are the takeaways? Based on the research and 
some common sense, it means the following: 

@ First, you shouldn’t dismiss the ASP alternative 
just because a market consolidation is under way. 
IDC still expects the market to double to more 
than $1 billion this year. 

w Second, you should evaluate your ASP like you 
do your big vendors — the top four success crite- 





warrior, you need to 
learn how to use your 
| points when you really 
| need them. You’ve 

| earned them! 

| Lori Rubin 

Rancho Palos Verdes, Calif. 


Girls, Give IT a Chance 


T’S UNFORTUNATE 
[e girls don’t see 

the potential they 
have in the IT world [“If 
Girls Don’t Get IT, IT 
Won't Get Girls,” Busi- 
ness, Jan. 8]. When I 
chose my career, an im- 
| portant factor was how 
family-friendly it would 
be. While many girls 
choose careers that tra- 
ditionally provide a good 
balance between career 
and family, they’re over- 
looking the fact that the 
world of computers is 
anything but traditional. 

So far, my career in IT 

has been happy and re- 
warding. I have felt re- 
spected, and I have never 
felt like my career would 
jeopardize my family life. 
Elizabeth A. Decker 
IT consultant 
Metro Information Services 
Fort Lauderdale, Fla. 


What | Said Was... . 


BELIEVE I was mis- 
[ee in “Directory 

Service Coexistence: 
Can We Talk Here?” 


Watch Your Downtime | 


SUSPECT most of 

your readers recog- 

nize that 99% uptime 
is disgraceful (“Hardware 
Problems Shut Down 
eBay for ll Hours,” News, 
Jan. 8], equaling 3.5 days 
of downtime over the 
course of a year. When 
someone says they’ve had 
99% uptime over four 
quarters, I expect their 
next words to be “and we 
are looking at alternative 
computing platforms.” 
Rick Dale 
Lakeville, Minn. 


The IT-Friendly Skies 


HE GUY you wrote 
about in “Uncov- 
ering a Worker’s 


Paradise Amid the 
Friendly Skies” [Busi- 
ness, Jan. 8] is a babe in 
the woods when it comes 
to utilizing frequent-flier 
points. Using my hus- 
band’s points, we’ve 
been to Europe four 
times in the last year 
alone, several times in 
first class. We also make 
great use of hotel fre- 
quent-stay points. This 
year, we’ve cashed in 
points to stay free in 
Paris, Amsterdam, Can- 
cun and Milan. Most of 
the time, the hotels up- 
grade us to suites. If 
you're going to be a road 














| ria seeming to be, (1) ability to scale, (2) applica- 


tions offered, (3) the range of services offered and 


| (4) the stability of the management team. 

| @ Third, at least for this year, you also need to eval- 
| uate your ASP’s financial staying power. Will it be 

| able to survive? What percentage of its customers 

| were dot-coms? How does cash flow look? Can it 

| keep the people you need to run your applications? 


| m Fourth, you also need to evaluate the staying 


| power of your ASP’s business partners. Who’s ac- 
tually running the data centers? Will that compa- 


ny survive? Who’s offering customer support? Is 


the software vendor going to bail out? 


This will be a frenetic year in the ASP space, as 
companies buy and sell each other, rejigger their 


| business models, adjust their marketing plans and 
| reposition their services. It will be confusing. 


You might also consider choosing another 


| acronym by which to refer to your ASP. The dot- 
| com crash could drag the acronym through the 


| was, “We're going to 


| 








| move from NT to AD at 


mud. So ASP will have a different connotation 
this year than it did last year. D 


and the detailed inter- 
play among all of those 
much better than Ring 
does, just as he undoubt- 
edly understands lawyer- 
ing better than I. All of 

| us ina CIO capacity have 
a professional obligation 
to judiciously and appro- 
priately hold operating 

| costs down. We strive to 
construct and manage 

| infrastructures that can 
absorb or be flexible in 
adapting to business 

| change without associat- 
ed appreciable cost in- 
creases. The estimates 

| that have been given to 
date aren’t cavalier reac- 
tions, but rather the re- 
sults of careful analyses 

| where the participants 

| were hoping that no in- 

| creases would be re- 

| quired. That’s just not 

| how it turns out. 

| Bruce C. Barnes 

| Vice president, technology 
strategy and planning 
Nationwide Insurance Cos. 

| Columbus, Ohio 


(Technology, Jan. 15] 
What I believe I said 


some point, but it isn’t 
happening fast,” but the 
article has me saying, 
“We're going to move 
from NDS to AD.” We 
still have a very large 
NDS system in place, 
and we’re happy with its 
robustness and stability. 
To my knowledge, we 
have no plans to move 
off NDS. 

Mark Thorsen 

Network services manager 
New York Times Shared 
Services Center 

Norfolk, Va. 


ClOs Are Cost-Aware 


N THE ARTICLE “Li- 
[= Showdown 

Looming” [Page One, 
Jan. 1], Carlyle Ring as- 
serts that he is “doubtful 
about that [$20 million 
increased expense] esti- 
mate being attributable 
to anything in UCITA.” 
While his comment is 
predictable given his role 
in authoring the pro- 
posed act, it’s worth not- 
ing that, to my knowl- 
edge, Ring hasn’t spent 
any time as the CIO of a 
large corporation. 

Those of us who are 
CIOs know our business- 
es, our infrastructures, 
our cost requirements 
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DON TAPSCOTT 


Bush Can Use IT 
‘To Aid Democracy 


E MAY BE barely two days into 

the job, but if President Bush 

really wants to assure his place 
in history, he should take the lead in addressing 
the most pressing question facing governments 
and citizens worldwide: In the digital age, what 
is the next step in the evolution of democratic 
government? 

I’m not talking about avoiding another Florida 
fiasco by voting through digital ballot boxes or 
voting from home on Sony Playstations. This 
would only add a high-tech veneer to an increas- 
ingly dysfunctional democratic system. 

The basic frameworks of the representative 
democracies around the world today were writ- 
ten by quill pens centuries ago and are quickly 
becoming obsolete in the 
Internet Age. Were we to 
start with a clean slate 
and design a government 
to fit our needs, we would 
never put in place today’s 
plodding beast. 

Emerging digital citi- 
zens have a different and 
higher set of expectations 
of government and poli- 
tics than their Industrial- 
Age predecessors. Digital 
citizens, who are not con- 
tent to stand in line for 
routine transactions or 
passively receive media- 
fed campaign bulletins, impatiently demand 
better service, more convenient access to infor- 
mation and people and the opportunity to have 
their say on their own terms. 

Elections are ostensibly the voters’ opportunity 
to tell governments what to do, but, increasingly, 
voters don’t believe the system is working. Virtu- 
ally every democracy is suffering growing voter 
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cynicism. 

Today, political parties present rosters of can- 
didates, and the winners go off to the country’s 
capital to do largely as they see fit. They cogitate, 
debate and vote within their sealed bubbles. After 
a fixed period of time, another election is held to 
pass judgment on the job they have done. 

This system made sense back when the West 
was being settled. Citizens didn’t have the edu- 
cation, time, resources or communication tools 
to have meaningful, ongoing discussions with 
elected officials. Public policy issues moved at a 
horse-and-buggy pace, and issues could be taken 
“to the people” at election time. 

Today, the pace of change is much faster. When 
unforeseen problems arise, governments can’t 
credibly claim to have a clear mandate to deal with 
them. Yet, few systems exist for governments to 
seek solid direction from voters between elections. 





| even competitors. For an 


| thrive within an informa- 








NEWS: 


This issue goes beyond simply knowing what 


| the people want, since opinion polls can provide 
| that information. Governments could introduce 
| digital mechanisms to encourage discussion and 
| raise awareness of issues, and thereby benefit 

| much more from the wisdom and insight that a 


nation can collectively offer. How would this 


| work? It’s never been tried on a large scale. 
| Some small experiments are occurring around 


the world where governments are prepared to 


| listen, not just talk. The U.K. has taken to the 

| idea of online “citizen juries” by posting citizen 

| hearing proceedings on the Internet. The Danish 
| Board of Technology has a portal for continuous 
| dialogue between citizens and government deci- 


sion-makers. 
Bush should seize the momentum for electoral 
reform in the U.S. to spark a much broader dis- 


| cussion. He should pledge to modernize democ- 
| racy and give full voice to the people that digital 


tools now offer. D 


WILLIAM 


Managing Your 
‘Ecosystem’ 


NE WAY to view a corporation 
is through the “information eco- 
system” it inhabits. An ecosystem 
emerges when a community and its surrounding 
environment function as an interwoven collective; 
from a corporate perspective, an information eco- 
system is comprised of systems, data, processes, 
people and external enti- 
ties that impact or are im- 
pacted by that corporation. 
Ecosystems have always 


M. ULRICH 


| existed, but Internet-based 


business-to-business ex- 
changes have increased the 
interconnectedness among 
suppliers, customers and 
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organization to survive and 


tion ecosystem, it must un- 
derstand and optimize the 





relationships among the 
ecosystem’s components 
and participants. Doing so brings value to your 
company, suppliers, partners and customers. 
Effective ecosystem management provides several 
benefits: 

@ You can respond more quickly to requests for 
change because you can envision the impact of 
changes on parts of the ecosystem. 

w Exposing ecosystem relationships facilitates 
integration and streamlining of processes, sys- 
tems and data, which in turn can reduce costs 
and increase responsiveness to customers. 

@ Knowing which third parties use or provide 
certain data allows you to respond more quickly 
to their needs. 

w@ A comprehensive view of an ecosystem’s com- 





COMPUTERWORLD January 22, 2001 


| ponents provides better insight into making 


decisions on cross-functional projects. 


| @ Understanding relationships with third parties 
| establishes a foundation for collaborating with 
| them. 


The auto industry provides one example of 
information ecosystem management. Major auto 


| manufacturers have created business-to-business 
| exchanges for buying and selling materials and 

| are expanding these capabilities across their 

| supply chains. They’re also eliminating customer 


intermediaries through the creation of online 


| marketplaces. But the most significant factor in 
| the industry’s quest to leverage its information 





ecosystem is that these efforts involve collabora- 
tion with competitors. 

The recognition that corporations are part of a 
big picture has evolved as supply chain, electron- 
ic marketplaces and other Web-enabled business 
models emerge. As we increase our understand- 
ing of this view, we see how companies can effect 
change for the betterment of entire industries. 

But existing ecosystem models, such as those 
forged by the auto industry, will change as well. 
The auto industry has institutionalized a “partici- 
pant” model, in which a handful of larger mem- 
bers dominates the ecosystem. This will likely 
change as smaller members self-organize and 
lobby to offer input into the ecosystem’s future. 

To leverage information ecosystems, IT and 
business executives should focus on ecosystem 
understanding, collaboration and governance. 
Understanding involves creating a knowledge 
base that reflects the relationships among data, 
systems, processes, business units and external 
entities. This knowledge can, in part, be shared 
with other members of the ecosystem — a supply 
chain, for example. Business-to-business relation- 
ships may then be reincorporated back into the 
enterprise knowledge base. 

An ecosystem functions most effectively when 
its participants work together to tackle industry- 
wide challenges. This requires collaboration be- 
tween your company and suppliers, customers 
and competitors. But internal collaboration 
among IT, business units, outsourcing firms and 
other elements within your company is also im- 
portant because in the past, business and IT units 
have not always collaborated effectively. 
Governance formalizes, through the creation of a 
legal entity, ecosystem models that are in many 
cases implicit. This is particularly important 
when developing supply chain, customer and 
competitive relationships. Governance defines 
how an ecosystem’s participants should act and 
what rights they have. This includes issues such 
as direct access to data, data integrity, privacy, 
security, software ownership and licensing rights, 
as well as other areas that might emerge. 

Rapid change, technological advancements, 
competition and other unknown issues will 
continue to emerge to challenge companies in 
every industry. Approaches to dealing with these 
challenges must consider the big picture. Under- 
standing and managing your information ecosys- 
tem will better prepare you to deal with existing 
and unforeseen changes. DB 
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THE ANDERSON SCHOOL AT UCLA 


EXPAND YOUR CONNECTIVITY 


_ FEBRUARY 7-8, 2001 











Galore eames and nina at the 
Symposium include: | 
> Ed Breen, CEO, Motorola Broadband 
Communications 
> Chris Brennan, President, Mobileum — 
> Ann Delligatta, former C00, 
Autobytel. Sem 8 
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UCLA 


» Leo Hindery, CEO, Global Sactee Inc. 

» Guy Kawasaki, CEO, garage.com 

» Leonard Kleinrock, CEO and Chairman, 
Nomadix Inc., and Professor, Computer 
Science at UCLA 

_» John Morgridge, Chairman, Cisco Systems 

> Chunka Mui, Partner & Chief Innovation 
Officer, Diamond Cluster Int'l 


» Ann Winblad, Partner, Hummer Winblad 
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ANDERSON SCHOOL AT UCLA 
Information Systems Associates 


present 


in conjunction with 


a National 2-Day conference hosted by 


THE ANDERSON SCHOOL 
Center for Management in the Information Economy (CMIE) 
on the UCLA campus 


The Symposium will be held on the second day of this two-day 
conference featuring 35 multiple-track sessions led by 90+! 
speakers, moderators, and panelists. Prominent business and 
academic leaders present their insights into the most relevant 
issues facing the information economy, including Internet busi- 
ness models, broadband content and adoption, and wireless 
communications and applications. This two-day event is fol- 
lowed by a one-day academic conference highlighting current 
research directions in the management of the information 


economy. 





For more information and to register, 

visit the CMIE Web site at 
www.anderson.ucla.edu/research/cmie or 
contact the Center at (310) 206-0937. 
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NEW ROUTE FOR 
TRANSPORTATION 


Users of the new Inter- 
net marketplace Freight- 
Wise say it makes it eas- 
ier for them to conduct 
business and fills a gap 
in the transportation 
industry. But analysts 
say the company’s busi- 
ness model isn’t a sure- 
fire winner. ) 40 


TRADING UP? 


Nasdaq’s new Super- 
Montage trading system 
got a thumbs up from 
the SEC earlier this 
month. But opponents 
say they still fear that 
the system will decrease 
competition in the in- 
dustry and possibly 
increase costs to 
consumers. ) 40 


RECESSION 
SURVIVAL TIPS 


If the economy slides 
into a recession, many 
companies will find 
themselves in unknown 
territory, writes Ed 
Yourdon. Most IT pro- 
fessionals weren’t in the 
job market during the 
1991 recession, but Your- 
don’s been around since 
the mid-’60s and has 
some tips to help IT 
projects survive. ) 41 


FAST COMPANY 


At Cambridge Incuba- 
tor, the IT staff has to 
be ready to roll out the 
infrastructure for a new 
company at the drop of 
a hat. To accommodate 
that, the entire company 
is built around speed 
and flexibility. » 41 











WAR GAMES 


We made it through the 
Y2k rollover relatively 
unscathed. But other, 
more sinister threats 
could still be lurking 
about. An organized 
series of cyberattacks 
could very well send 
society into such chaos 
that it could cripple the 
military’s ability to com- 
municate and move 
troops. That’s where the | 
Critical Infrastructure — 
Assurance Office comes 
in. The group has been 
gearing up for such an 
attack since its creation 
in 1998.) 44 


HIRING OVERSEAS. 


When hiring workers 
with H-1B visas, Master- 





Card International _ __V 


doesn’t stop after the 
salary is negotiated. The 
company has a reloca- 

tion program that 

matches newcomers 

with people of the same 
nationality to help an- | 
swer common questions. | 
Workforce experts say 
such a system is a wise 
move for companies 
looking to recruit highly 
skilled foreign workers 

in today’s tight labor 
market. » 52 


ASP ASSISTANCE 


What do you look 

for when entering into 
an agreement with an 
application service 
provider? Service-level 
agreements can help 
you spell out the mea- 
sures for performance 
and consequences for 
failure. } 53 











RECRUITERS CAN teach managers a thing 
or two about talent scouting and retention. 


(GUARDING 
YOUR GATES 


WAKE UP! Your employees may not be looking, but that 
doesn’t mean they’re not going anywhere. IT recruiters 
know how to contact and lure your top staff. So what do 
you do to hang on to them? Fight fire with fire. Arm 
yourself with the same tactics recruiters 

are using to steal your talent so you can 

beat them at their own game. 
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Exchange Seeks to Deliver 
The Real Goods for Users 


Freight Wise: Filling gap in transportation 


or just another flash in the pan? | 


BY LINDA ROSENCRANCE 
© SUCCEED in the 
world of trans 
portation manage- 
ment, an online ex- 
change must make 
doing business prof- 
itable, more reliable and easier 
for carriers and shippers. 
According to some custom- 
ers who participated in a trial 
run, the FreightWise Inc. on- 
line marketplace has the right 
stuff to succeed in an increas- 
ingly crowded market. The ex- 
change, a truckload and inter- 
modal (shipping containers 
carried by trucks and rail) 
matching site, had a controlled 
launch in October and went 
live at the end of last year. 
Marsha Price, 
customer and 
marketing at Triton Transport 
Services Inc. in Westlake, 


more 


service sales 


Fort Worth, Texas-based 
FreightWise, if Triton had a 
truck sitting idle in the yard, 
the dispatcher would have to 
make 20 or 30 calls to shippers 
to find goods to put on that 
trailer. 

“Now, we can take 100 trail- 
ers and post them onto the 
marketplace, where hundreds 
and thousands of shippers are 
looking for trucks for their 
loads,” Price said. 


No Face-to-Face Meetings 


However, while Price ac- 


knowledged that FreightWise | 


helps to eliminate paperwork 


and reduce costs, she said she’s 


concerned that online ex- 


changes don’t help foster the | 
face-to-face meetings that help | 


firms develop confidence in 
one another. 

Developed by the Burlington 
Northern Santa Fe Railway 
Corp. (BNSF), also in Fort 
Worth, FreightWise gives its 
customers the opportunity to 
offer, select and pay for trans- 
portation services online, said 
Greg Fox, FreightWise’s presi- 
dent and CEO. 


director of 


The exchange charges a 3% | 


commission — split between 
buyer and seller — per transac- 
tion, with a minimum charge 


of $25. Shippers and carriers | 


can participate in the market- 
place in two ways: Carriers can 
auction off their capacity to 
shippers in real-time auctions, 


| or shippers and carriers can 
| enter into agreements based 


on previously published rates. 
Unlike exchanges that mere- 


available capacity and then fi- 
nalize transactions off-line, 
FreightWise allows buyers and 
the entire 
transaction online, said Fox. 


sellers to execute 


BY MARIA TROMBLY 

Although the Securities and 
Exchange Commission unani- 
mously approved a new trad- 
ing system for the 
Stock Market earlier this 
month, opponents are still con- 
cerned that it may decrease 
competition and increase costs 
to consumers. 

The new system, called Su- 
perMontage, gives Nasdaq 
traders options — such as 
anonymity — previously avail- 
able only through competing 
electronic communication net- 
works (ECN), which currently 
handle 30% of Washington- 
based Nasdaq Stock Market 
Inc.’s trading volume. 

This could reduce competi- 


| tion by tilting the playing field 


away from ECNs and toward 
more traditional players. It 


| could also accelerate the rate 


| of consolidation among the 


ECNs, according to Alan Alper, 
an analyst at Gomez Advisors 
Inc. in Waltham, Mass. 

But overall, the new system 


Nasdaq | 





Doug Granger, vice presi- 
dent of logistics at Hershman 
Recycling Inc. in Branford, 
Conn., which moves more than 
30,000 full truckloads per year, 
said he has only three people 
to handle the company’s 
freight-booking operations. 

“It takes a lot of work to 
book loads manually — it usu- 
ally takes 20 minutes to book 
one load,” he said. “And 
also difficult to find a carrier to 


it’s 


move our freight in and out of | 


remote areas. But with Freight- 


| Wise, we put in our parameters 


and it comes up with a solu- 


| tion, telling us where there is 
ly function as bulletin boards | 
where users post loads and | 


the necessary equipment that 
is a perfect match for our load.” 

“It’s more cost-effective, be- 
cause we can make a decision 


without having to make 100 | Mm poset : = pend 
| USING FREIGHTWISE, Triton Transport can post listings of available 


phone calls, and we can com- 
plete the entire transaction — 


SEC OKs Nasdag Trading 


Ohio, said that before using | 


‘System, Despite Objections 


| 
| 
| 
| 


will make it easier for investors | 
to get the best possible prices | 


on stocks, he said. 


“It’s something that’s been | 


long awaited and has a great 





| deal of utility for the industry,” | 
| said Alper. 





from the cradle to the grave — 
online,” Granger added. 

While Price and Granger say 
they’re excited about Freight- 
wise’s future, Donald Brough- 


ton, an analyst at A.G. Edwards | 
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& Sons Inc. in St. Louis, ex- 
pressed some _ reservations 
about its ability to survive. 

“This is an example of a rail- 
road trying to move in on the 
trucking industry via the Web,” 
said Broughton. 

“It’s interesting, but you al- 
ready have other players like 
Transplace” — a Web-based 
marketplace developed by six 
major trucking firms, he 
added. “Because [the trucking 
industry] is not [BNSF’s] niche, 
it will be an uphill climb.” D 


trucks and complete transactions with shippers online. 





But Nasdaq has other prob- 
lems, including the fact that it 
is more expensive than the 
New York Stock Exchange 
when it comes to buying and 
selling stocks, according to 
Barbara Roper, director of in- 
vestor protection at the Con- 
sumer Federation of America 
in Washington. 

“The SEC has approved a 
system that perpetuates all of 
the problems that exist in the 
current marketplace,” she said. 

An SEC report released Jan. 
8 said that Nasdaq investors 
may be paying as much as ll 
cents per share more than 
NYSE investors for stocks be- 
cause spreads (the difference 
between the price at which an 
investor places an order and 
the price at which it is filled) 
can change rapidly. 


Skipping Earlier Orders 


One problem, said Roper, is 
that brokers often fill cus- 
tomers’ orders by matching 
them internally with orders 
placed by other customers — 
skipping over individual in- 
vestors who might have placed 
orders earlier through ECNs. 

SuperMontage, Roper said, 
just makes this process faster 
without fixing it. 


But Nasdaq spokesman 
Scott Peterson said that the 
SEC study compared apples to 
oranges because Nasdaq lists 
the stocks of small companies 
that wouldn't qualify to be list- 


ed on the NYSE. 


“In our largest securities, 
our top 50 stocks — which, by 


| the way, represent 53% of all 





the trading on the Nasdaq — 
our spreads were as good as 
theirs or better,” said Peterson. 

He added that Nasdaq’s 
spreads have fallen by 75% 
since 1997 and will continue to 
drop under the new system. 

Other critics of the Super- 
Montage trading system in- 
clude ECNs such as New York- 
based Instinet Corp. 

“The implementation of Su- 
perMontage will exacerbate 
Nasdaq's costly and inefficient 
trading system,” said Instinet 
spokeswoman Silvia Davi. “But 
it has come a long way from 
the original one that was intro- 
duced over a year ago.” 

In September, for example, 
Nasdaq agreed to do away with 
a controversial plan to auto- 
matically put prices offered 
through ECNs last on its list of 
available trades if the private 
systems charged extra fees to 
traders. D 
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ED YOURDON 


A Recession Guide 


ERE’S A SOBERING thought: Most of today’s IT pro- 








Speed and Flexibility Are Key for 
Workers at Cambridge Incubator 


Interviewee: Bill Ditmars, 
director of network operations 
Company: Cambridge Incuba- 
tor (Cl), but a name change was 
pending as of last Thursday. 
Main location: Cambridge, 
Mass. 

Number of IT employees: 
Six in network operations and 
10 in applications development 
Number of employees 
(end users): 50; IT also 
supports about 50 people 
employed by the member 
companies. 

How difficult is IT 
recruiting? Is the 
word incubator a 
turnoff? “There have 
been some chal- 
lenges with the word 
Incubators have not 
been getting favorable 
coverage as of late. 
But we've made 


What It's Like 


prospects, staff and CI.” 
Major initiatives: A migra- 
tion from Windows NT 4.0 to 
Windows 2000, including an 
Exchange 2000 upgrade 


Career paths: “One of the op- | 


portunities is for someone to 
move into a member company 
as the member companies 
grow. By that time, the Cl em- 
ployee has a solid understand- 
ing of what that member com- 
pany’s business is all about 


and how they can con- 


tribute.” 
Compensation 
and bonuses: 
Salary, stock and bene- 
fits; no bonus program. 
Employee reviews: 
Quarterly. “We're re- 
sponsible for support- 
ing our member com- 
panies, but our peri- 
od of engagement is 


several shifts in our To Work At i limited. So there's a 


business model and 

have evolved into what we con- 
sider a different animal - we call 
ourselves a technology-based 
venture creation company. 
We're more focused on building 
companies that are 100% Cl- 
owned; it’s more of a holding- 
company model.” 

How does IT contribute to 
the business? “Now that 
we're more focused on creating 
ideas ourselves and then build- 
ing a team around those ideas, 
IT is part of a multidisciplinary 
team that evaluates new initia- 
tives and assesses how the ini- 
tiative would develop.” 
What’s unique about 
working in IT at an incu- 
bator? “The fact that you're 
working with a variety of new 
and emerging companies, 
which is always exciting. The IT 
challenge is to maintain a staff 
that can rapidly respond to the 
unique IT requirements of each 
member company... . Our net- 
work, from a voice and data 
standpoint, is designed to ac- 
commodate rapid growth 
spurts. We can set up a new 
member company with very lit- 
tle effort.” 

Mission-critical systems: 
“Among the most important are 
e-mail, calendaring, contact 
management and document 
sharing. These enable our 
member companies to stay in 
touch with the VCs, business 


need for frequent 
feedback.” 
Workday: “A typical day is 


eight to 10 hours, . . . about 8:30 | 


to 5:30... . On the other hand, 
as member companies reach 
major milestones, those days 
can stretch to 12 to 16 hours, 
with people camping out at. . . 
our co-location center.” 
Dress code: Business casual 
to casual. 
Kind of offices: “All open 
space. We have bays with slid- 
ing doors that enable you to 
open one bay to another and 
expand them as needed.” 
Decor: “We've been described 
as ‘techno-chic.’ We have a lot 
of transparent walls, as well as 
ice blues and seafoam green. 
The bays are open and well-lit, 
and we have great views of 
[Boston]. Our CEO has an er- 
gonomically correct Star Trek 
office chair with a keyboard 
that’s split in half and attached 
to the arms of the chair.” 
Must people carry beep- 
ers? Cell phones? “We use 
cell phones that have instant 
messaging and Web access.” 
Amenities: A wellness pro- 
gram with occasional on-site 
yoga classes, tai chi classes 
and nutritional seminars. 
Would employees feel 
comfortable e-mailing the 
CEO? “Absolutely.” 
- Leslie Goff 
(Igoff@ix.netcom.com) 








fessionals haven’t been in the field long enough to 
remember the 1990-91 recession, not to mention the 
recession of 1982 or the recession of 1973-74. If today’s 
economy does slide into a recession, then a 


generation weaned on an economic boom may 
be in for a rude shock. 

As someone who has muddled through good 
times and bad times in the IT industry since the 
mid-1960s, here are a few words of advice: Re- 
member that people’s memories will last much 
longer than economic peaks and troughs. Most 
recessions last only a year or two before good 
times return. But if your organization mistreats 
its IT professionals during a recession, they will 
get their revenge when the job market im- 
proves. Conversely, if they realize that you’ve 
protected them from layoffs, downsizing, salary 
freezes and other indignities, most of them will 
reward you with greater loyalty than you might 
have expected. 

Everyone understands that an economic 
downturn leads to cost-cutting, and employees 
— in their personal lives — ex- 
hibit this behavior just like com- 
panies do. Unfortunately, senior 
management edicts can some- 
times be inconsistent and demor- 
alizing, and if employees are al- 
ready cutting back on their own 
personal spending, then corpo- 
rate penny-pinching can be even 
more annoying. Imagine a com- 
pany that announces a salary 
freeze, and imagine the same 
company putting additional pres- 
sure on its IT project managers 
to finish their development proj- 
ects as quickly as possible, in or- 
der to realize the economic bene- 
fits quicker. All this is under- 
standable, but it typically trans- 
lates into additional overtime for 
programmers. If those program- 
mers discover that new account- 
ing rules disallow charging an ex- 
pense-account pizza for a late- 
night office meal, they’re likely to 
react by turning off their work- 
stations and going home at 5 p.m. 

In addition to these penny- 
pinching morale-busters, managers need to be 
prepared to fight for project team members 
who truly deserve raises or bonuses. Some- 
times this is impossible. But in most cases, se- 
nior managers will make exceptions to a gener- 
al freeze if persuasive cases can be made. Em- 
ployees will remember the willingness or un- 


All this 
involves a 
degree of 

Machiavel- 
lian politics. 


S a 


willingness of their boss to fight the corporate 
bureaucracy on their behalf, and this is an even 
more significant issue if layoffs, downsizing and 
outsourcing decisions are involved. Indeed, the 
last recession provided countless examples of 
employees who were forced out by corporate 
downsizing decisions but who then returned to 
the same jobs as contractors. 

On a larger scale, managers must realize that 
a recession causes big-ticket IT projects and in- 
vestments to be deferred, or even canceled in 
midstream. This can be disheartening even in 
the best of circumstances, and it’s complicated 
by the political squabbling that occurs when 
various groups fight over a smaller budget. If 
you have a team of programmers slaving away 
in the midst of a project that’s threatened with 
premature termination, it’s tempting to keep 
everyone in the dark until a final 
decision is made. But chances are 
that everyone on the team is al- 
ready aware of the rumors. In- 
deed, some team members may 
already be circulating their 
résumés in order to find new 
jobs before they’re laid off or 
transferred to boring, dead-end 
assignments that rob them of the 
chance to gain experience with 
the leading-edge technology 
they’re currently using. 

All this involves a degree of 
Machiavellian politics that most 
boom-economy project managers 
are completely unfamiliar with. 
Honest, ethical behavior is the 
best long-term strategy when 
confronted with nasty political 
maneuvers to deprive your proj- 
ect of the resources it needs. But 
perhaps the most important 
thing to remember is that coping 
with these political shenanigans 
requires time, effort and emo- 
tional energy — and for the man- 
ager who is already overbur- 
dened with the ordinary pressures and respon- 
sibilities of running a project, this may turn out 
to be the largest of all recession impacts. D 





Yourdon is editor of Cutter IT Journal, published by 
Cutter Consortium in Arlington, Mass. Contact him 
at wwwyourdon.com. 
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IBM E-BUSINESS HOSTING™ DOES MORE THAN MANAGE YOUR WEB SITE — WE 
HELP YOU PREPARE FOR THE GRUELING REALITIES OF DOING BUSINESS ON 

THE WEB. OUR STRESS-TESTING CENTERS ANALYZE YOUR SITE — BEFORE 

IT GOES LIVE — TO VERIFY THAT IT CAN HANDLE ANY MASSIVE SPIKES THAT 

COME ITS WAY. AND WE CONTINUE TO TEST AND MONITOR YOUR SITE ONCE 

IT’S ONLINE TO IDENTIFY POTENTIAL PROBLEMS — SO THEY 

DON’T TURN INTO YOUR CUSiOMERS’ PROBLEMS. 

E-BUSINESS HOSTING. ONLY FROM IBM. 


Call 1 800 IBM 7080, ask for host or visit im.com/e-business/hosting 
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T’S APRIL FOOL'S DAY, 2002. Glitch- 
orchestrated es in air traffic controller screens 
cyberattack nearly cause a collision above 
New York’s LaGuardia Airport. 
Two weeks later, California Inde- 
pendent System Operator Corp., 
which controls California’s power 
federal government grid, somehow misplaces an electrical 
energy order to Southern California 
Edison, leaving two-thirds of San 
Diego in the dark. Then in May, a high- 
power microwave burst fries the elec- 


prepare for battle. | tronics at an abortion clinic in Virginia. 


Hypothetical “information warfare” 


By Deborah Radcliff | aw) exercises like these are being 





JOHN TRITAK AND NANCY WONG 
are leading the federal government’: 
efforts to help prepare the nation’s 
private sector to defend against 
cyberattacks. 
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played out around the country in 
preparation for what politicians, the 
military and law enforcement officials 
fear will be an orchestrated cyber- 
attack on critical U.S. infrastructure 
companies. The theory goes that if a 
well-funded, organized series of cyber- 
attacks were to strike at a target’s eco- 
nomic and structural nerve centers, it 
would send the target society into 
chaos and make it difficult for the mili- 
tary to communicate and move troops. 

This particular information war 
game was played out among 75 IT exec- 
utives attending an IW workshop at the 
SANS Institute’s Joint Computer Secu- 
rity Conference in Monterey, Calif. 

“In the worst-case scenario, every 
major industry sector would be affect- 
ed,” says Stephen Northcutt, a SANS 
fellow and a former military IW expert 
who led the animated workshop at the 
conference. Note that most of the tar- 
gets in Northcutt’s IW games are pri- 
vate-sector companies. 

“When you're talking about informa- 
tion warfare, you’re talking about in- 
formation systems used to cripple the 
government and economy,” says John 
Tritak, director of the Critical Infra- 
structure Assurance Office (CIAO) in 
Washington. “Close to 90% of those 
critical infrastructure companies are 
privately owned and operated.” 

The CIAO, formed in 1998 under 
presidential directive PDD-63, outlines 
a national infrastructure protection 
plan to bring better security and re- 
porting to the telecommunications, 
transportation, emergency services, 
energy and financial industries. The 
directive deems those industries as 
critical to the nation’s operational in- 
frastructure. Although President Bush 
isn’t bound to support the directive, 
Tritak and others say they hope PDD- 
63 will remain in effect. 

In two years, IW preparedness has 
moved forward the fastest in the highly 
regulated and well-organized financial, 
energy and telecommunications sec- 


Clearly, the eventuality 
of such an attack 
is present. That's what 
motivated [the Clin- 
ton] administration 
to move forward with 
a national plan. 


JOHN TRITAK, DIRECTOR, 
CRITICAL INFRASTRUCTURE 
ASSURANCE OFFICE 








| tors, say Tritak and others. But IT lead- 


ers in the private sector say they’re hes- 


| itant to report incidents to agencies 
| like the CIAO and the FBI. Still, Tritak 


says the agencies need this information 


| for intelligence and predictive analysis. 


While the impact of IW bears the 


| same uncertainty as Y2k, many IW 

| experts say cyberterrorism and cyber- 
| warfare are inevitable. In the past year, 
| hacking hobbyists have shown how 

| easy it is to propagate viruses through- 
| out Internet-connected mail systems. 

| They’ve also shown they can hack 

| armies of unwitting computers and 


make those computers do their bid- 
ding. Now, the U.S. government is 
thinking about what terrorists with 
more resources could accomplish. And 
so are countries like China and Russia, 
which are developing their own IW ca- 
pabilities, according to Richard Power 


| in the book Tangled Web. 


Moving Mountains 

The directive that created the CIAO 
is a national defense document that, 
ironically, relies on the private sector 
to accomplish its mission. Telling that 
to executives hasn’t been easy. 

“The concept of information warfare 
doesn’t present a compelling case to 
the CEO and the board, whose respon- 
sibility is to their shareholders and 
customers,” Tritak explains. “But as 


they begin to see that operating in a re- | 


liable and secure business environ- 
ment is part of taking full advantage of 
the Information Age, they get it.” 

To make this business connection, 
the CIAO recruited a private-sector se- 
curity expert, Nancy Wong, from San 
Francisco-based Pacific Gas and Elec- 
tric Co., to help develop a business- 
friendly framework and get the mes- 
sage out. Wong soon learned she had a 
third challenge: keeping government, 
in its zeal to protect, from crossing 
constitutional lines between public 
and private sectors. 

“We put in place a road map to iden- 
tify who are the people who have the 
most influence in business risk man- 
agement — financial security analysts, 


bond raters, corporate executives, even | 


auditors,” Wong says. “We’re using ex- 
isting networks by cascading informa- 


tion through their members to the peo- | 


ple who communicate it even further.” 

The networks Wong refers to in- 
clude industry associations like the In- 
stitute of Internal Auditors, the North 
American Energy Reliability Council 
and the National Security Telecommu- 
nications Advisory Committee. 

The CIAO’s strategy of taking ad- 
vantage of existing networks — and 
their built-in emergency preparedness 
— helped speed along the formation of 
the first of two Information Sharing 
and Analysis Centers (ISAC) for the fi- 
nancial and telecommunications in- 
dustries. ISACs are privately owned, 





Anatomy of 
A Cyberattack 


Here’s how a computer invader plans and launches 
an attack on information systems: 


Ch 


Attack Invader gains root or 


Recon Invader uses information- 
gathering programs and techniques to 
sniff traffic at the network gateway, then 
scans ports for vulnerable services 


Profile T Invader gets 


passwords, then identifies machines and 
software running on the network 


administrative privilege of unclassified systems, 


then seeks and modifies information. 


Cover Tracks invader hides the 


evidence trail and slips away. 


Wait for Results Invader watches 


CNN to see what damage he wrought. 


“The weak areas [of the above scenario] 
are in predicting when someone is gather- 
ing information for a later attack. And, once 
we've been attacked, the problem is in re- 
covery,” says Dennis McCallam, senior 
technologist at Herndon, Va.-based Logi- 
con Inc., the IT contracting division of Los 
Angeles-based defense contractor 
Northrop Grumman Corp. 


For the past year, Logicon has been 
working with the Air Force Research Labo- 
ratory (AFRL) in Rome, NY., to develop 
real-time analysis and recovery capability. 


The result is something they call the re- 
silient network: intuitive data hiding and re- 
covery agents that will recognize when key 
data is erased or replaced with bogus data. 
Then that data or computational process is 
replaced with the untouched version, and 
the administrator is alerted. 


The administrator starts by specifying 
the most essential data or processes that 
need protection - say air traffic patterns 
that, if interrupted, could lead to a collision 
or crash. The agents then camouflage the 
data by hiding it under fake file names and 
fake extensions in unlikely places on the 
network. At the first sign of data destruc- 


tion or unauthorized tampering, the agent 
follows its path back to the clean data, 
copies and replaces it and alerts adminis- 
trators. 

“Our work represents a new vision in in- 
formation infrastructure command and 
control that goes way beyond the protect- 
and-detect technologies [such as firewalls 
and intrusion detection systems] that came 
out in the ‘80s and "90s," says Joe Gior- 
dano, technical adviser to the AFRL. “This 
is active response, the linchpin to active 
forensics and protection.” 

Researchers are working on ways to tie 
the algorithm into other technologies also 
in research, including advanced forensics 
and a tracking system to follow a live evi- 
dence trail. 


Don't be surprised if these algorithms 
eventually wind up in the private sector. 


The AFRL developed the first intrusion 
detection algorithm, which spun out to the 
private sector when several former Air 
Force researchers founded the first intru- 
sion detection company, WheelGroup, 
which was later acquired by San Jose- 
based Cisco Systems Inc. 


~ Deborah Radcliff 





industry-specific cooperatives through 
which the government plans to chan- 
nel warnings out to the private sector. 
The government also plans to use 
ISACs to gather intelligence it needs to 
better predict an orchestrated attack. 

Energy and technology centers are 
expected to be completed by the end 
of March. The long-standing emer- 
gency management methodologies and 
collaborative networks provide the 
framework for these infrastructure 
analysis and reporting structures. 

Bruce Moulton, vice president of in- 
frastructure risk management at 
Boston-based Fidelity Investments, ex- 
plains, “If a failure occurs in the North- 
west power grid, for example, the en- 
ergy sector has processes to keep that 
power failure from rippling across the 
United States.” 

And because its core business is 
consumer trust, the financial services 
industry has particular impetus for se- 
curity and disaster planning, says 
Moulton, who chairs the financial ser- 
vices ISAC. “We've already got a good 
framework of controls to protect 
against disruption and customer priva- 
cy violations,” he adds. 


A Matter of Trust 


But the biggest problem with this in- 
frastructure plan is that businesses 
have a hard time visualizing the return 
on investment in risking corporate pri- 
vacy by reporting breaches. 

“The risks in reporting are clear: the 
fear of negative publicity, proprietary 
information shared in court, loss of 

| public confidence or reduced trust in 
the economy itself,” Harris Miller, 
president of the Information Technolo- 
gy Association of America, told an in- 
frastructure panel last month at 
SafeNet 2000. 

The question of reporting was one 
of the most nettlesome issues tossed 
around at SafeNet, where leading pri- 
vacy and security professionals, educa- 
tors, vendors and infrastructure com- 
panies met with government infra- 
structure protection heavyweights at 
Microsoft Corp.’s conference center in 
Redmond, Wash. 

| Meanwhile, industry leaders are 

| awaiting the passage of a House bill, 

| the Cybersecurity Information Act, that 
would reduce liability and antitrust ac- 

| tion, along with actions brought under 


the Freedom of Information Act that 
are related to cyberinformation sharing. 


Who Responds? 


Such complexities spotlight the pre- 
carious relationships being forged 
among defense agencies, law enforce- 
ment bodies and the private sector, 
which all have stakes in the national 


| infrastructure. On top of that, there’s 


the sticky issue of jurisdiction. 

Who responds to an orchestrated at- 
tack, particularly one that affects mili- 
tary operations and crosses state lines? 
The answer differs from region to re- 
gion. But, absent a declaration of mar- 
tial law, it wouldn’t be the military. 

“When we're at war, we just go blow 
up the bad guys. But domestically, our 
mission is different. We can’t trespass 
[into private systems] when we chase 
the bad guys. And we can’t blow up the 


| bad guys, because the bad guys are an 
| unknown,” explained Jim Christy, a su- 


pervisory special agent at the Defense 
Department’s Information Assurance 
Office, to a group of 400 officials at a 
state summit on cybercrime in Mesa, 
Ariz., in October. 

So the burden of responding to pri- 
vate-sector calls for help will most like- 


| ly fall to the FBI’s InfraGard program, 


which itself is fishing for intelligence 
from corporations and private citizens. 
Many IT leaders say they don’t trust 


The NSA 
Wants You! 


The National Security Agency (NSA) 
says it wants colleges to graduate IT pro- 
fessionals who are ready to “enter the 
workforce better equipped to meet chal- 
lenges facing our national information in- 
frastructure.” So it sponsored an outreach 
program called Centers of Academic Ex- 
cellence in Information Assurance and 
Education. 

As of October, 14 schools had achieved 
this designation, including Carnegie Mel- 
lon University, James Madison University, 
George Mason University, Purdue Univer- 
sity, Stanford University, the Naval Post- 
graduate School and several state univer- 
sities, including Florida State, Idaho State 
and lowa State. 

Many other institutions - such as Syra- 
cuse University in New York - are in the 
process of applying for this designation. 
The only problem is that it seems as 
though foreign countries are reaping more 
benefit from this program than the U.S. At 
Syracuse, for example, nearly all the com- 
puter science students are foreigners. A 
look into master's dissertations at Syra- 
cuse’s Internet Security Principals course 
in November turned up only one U.S. citi- 
zen out of 37 students. The remaining 36 
were from the Middle East and Pacific Rim 


countries. 
- Deborah Radcliff 
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the agency, especially given its poor 


| sensitivity to business issues, including 


efforts to limit encryption exports, and 
most recently, its controversial Carni- 
vore e-mail wiretapping system. 
Meanwhile, Arizona has unveiled 
perhaps the most unusual plan on the 


| drawing board today: Make the Air 


Force National Guard the nerve center 
for private-sector reporting and re- 
sponse, an idea that comes from 
Christy and Republican State Rep. Wes 


| Marsh, who’s also a member of the Air 
| Force Reserve. Marsh says that be- 


cause members of the National Guard 


| work full time in the private sector, 
| they’d make excellent liaisons between 
| the government and private sector. 


Better Today 


No matter how you look at these 


| issues, the net result of the presidential 


directive is that security awareness is 


| rising, ISACs are forming and execu- 


tives are more clued in. In spite of 


| raised awareness, internal and external 
| cyberthreats continue to rise, accord- 


ing to a joint survey by the FBI and the 


| San Francisco-based Computer Securi- 
| ty Institute. And, in a nonscientific on- 


line poll by Computerworld last month, 
only 17% of 150 respondents said their 
companies were prepared to respond 


to an orchestrated, warlike cyberattack. 





But is this work moving fast enough? 
“This is a race. If the industry doesn’t 
learn to manage its risk in a prudent 
way and something like an Exxon 
Valdez happens, then you'll see a chill- 
ing effect as laws get passed during the 
crisis,” says Tritak. “At the same time, if 
you try to overplay the risks and 
threats, you could lose your audience.” 

Already, international IW efforts are 
moving forward. 

The U.S. military has publicly an- 
nounced the formation of IW units. 
Cyberclashes between Israeli and 
Palestinian factions that shut down Is- 
raeli and Palestinian government Web 
sites prompted the FBI to issue a warn- 
ing to American businesses in October. 
In December, the FBI issued another 
warning of an “increase in hacker ac- 
tivity specifically targeting U.S. sys- 
tems associated with e-commerce.” 

Yet in spite of these indicators, [W 


| thinkers say a cyberwar is years away. 


“Clearly, the eventuality of such an 


| attack is present. That’s what motivat- 





ed [the Clinton] administration to 
move forward with a national plan,” 
says Tritak. “But I don’t think anyone 
has the cybercapability today to launch 
an attack that would cripple the na- 
tion’s infrastructure. [The presidential 
directive] predicts such a scenario is 
still years away.” D 


MORE 


For deeper discussions of information security, turn to 
the Security Watch section of our online communities at 
www.computerworld.com/security 
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ARK SACHS, a U.S. Army 

major with battlefield net- 

work engineering experi- 

ence, explains his newest 

mission this way: “We un- 
derstand that one of the commodities 
we have to move is information — not 
just fuel, equipment and soldiers. That 
information movement requires an in- 
frastructure. And security of the infor- 
mation inside that infrastructure is a 
big concern.” 

At the end of 1999, Sachs became an 
operations analyst at the newly orga- 
nized Joint Task Force for Computer 
Network Defense in Arlington, Va., an 
assignment given to him just after he 
finished government-sponsored gradu- 
ate school at the University of Texas 
at Austin. 

Washington is the nerve center for 
those U.S. military networks put into 
the task force’s care: the Army, Navy, 
Marine Corps, Air Force and a dozen 
other agencies, such as the National 
Security Agency, Defense Finance and 
Accounting Service, Defense Logistics 
Agency and Defense Information Sys- 
tems Agency (the Department of 


Defense’s backbone support network). 
In essence, the Computer Network De- 
| fense task force has been charged with 
| protecting more than 3.5 million DOD 
| computers. 
| Sachs works the analytical side of 
| the task force. The other side is the 


[he Info 
° . 

Warrior's Job 
The U.S. military first experimented with 
information warfare in Operation Desert 
Shield, when it disrupted Iraqi military com- 
munications. But the job of an information 
warrior didn’t become official until October 
1999, when, at the behest of a presidential 
directive, the Computer Network Defense 
and Computer Network Attack missions 
were formed under the U.S. Space Com- 
mand at Peterson Air Force Base, Colo. 


With titles like operations analyst, elec- 
tronic engineer and chief of communica- 
tions and computer systems, information 
warriors develop and operate computer- 
based offenses and defenses. 


~- Deborah Radcliff 
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| watch team. The watch team monitors 
| DOD computers for problems, abnor- 
malities and intrusions both within 
and outside DOD networks — such as 
the distributed denial-of-service 
(DDOS) attacks that took down the 

Web sites of Yahoo Inc., Amazon.com 
Inc. and eBay Inc. early last year. “We 
observed the DDOS activity hour by 
hour, because if a problem arises 
somewhere else on the Internet, it may 
eventually affect us,” Sachs says. 

While the watch group gathers data 
from its network traffic, outside com- 
mercial emergency advisories and 
news reports, the analysis team to which 
Sachs belongs is tasked with figuring 
out what to do with that information. 

“If the watch reports something 
wrong — an intrusion or whatever — 
we then make an assessment of 
whether there is or isn’t an operational 
impact on the Department of Defense,” 
Sachs explains. 

Sachs hasn't been on the job long 
enough to chase down any serious 
attack on DOD systems yet. But Mark 
Duck has. As an early information war- 
rior in 1994, Duck took a job as net- 
work manager at Air Force Research 
Laboratory, known then as Rome Labs, 
in Rome, N.Y. In so doing, he stepped 


| right into an attack on the Air Force 


Research Lab network. 

Duck noticed that several of the lab’s 
servers had been compromised at root 
level, and he made a phone call that 
helped launch the biggest computer 





crime investigation in military history. 
It spread to more than 100 downstream 


| computers, including Air Force con- 
| tracting agencies, NASA's Jet Propul- 
| sion Laboratory and even the South Ko- 


rean Atomic Research Institute. 

“T’m the first line of defense,” says 
Duck, who’s now IT enterprise director 
at the Air Force Research Laboratory 
at Kirtland Air Force Base in New Mex- 
ico. As such, he blocks and tracks nu- 
merous attacks on the lab’s network. 
Duck also spends a lot of time on 
employee education. “A week after a 
tutorial on e-mail viruses, I embedded 
a virus in JavaScript and sent it anony- 
mously to our 1,200 users.” he says. 
“The virus secretly redirected those 
who click the attachment to ‘MyEvil- 
WebSite.com,’ which had a note re- 
minding them they shouldn’t open 
unsolicited attachments. Within seven 
minutes, 154 of my users had been reg- 
istered at that site.” 

The exciting work and ability to 
learn new skills has kept Duck in mili- 
tary civil service for almost seven years 
and has kept Sachs enlisted for almost 
20 years. But both plan to move to the 
private sector in the next year. 

“The private sector is also under in- 
formation warfare attack,” Duck says. 
“It’s just different. Instead of actual 
war, they have to worry about espi- 





onage and liability.” D 
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BUSINESS 


HEY’RE OUT THERE. Every- 
where. And they want your 
IT employees. 

Just ask Mark Roachell, 
technical recruiter at Kaiser 
Permanente Health Plan 
Inc.’s Information Technol- 
ogy Division in Pasadena, 

| Calif. He’s one of “them,” a 
recruiter who uses sophisticated Inter- 
net search methods to scout potential 
job candidates. 

“I don’t consider myself very aggres- 
| sive,” Roachell says. “But the infor- 
mation I find on the Web is very inter- 
esting.” 
Apparently so. That information, 

| he says, includes corporate employee 
directories, personal résumés, staff 
names and phone numbers. 

If a laid-back recruiter can find all 

| that data on the Web, rest assured that 
those who are out to openly raid your 
IT staff are finding lots more. 

Consider the mind-set involved: 

“You have to be a shark, constantly 
on the prowl,” says Dan Harris, CEO 
and senior trainer at Recruiters Dream 
Network in Arlington, Texas. 

The quarry that aggressive recrui- 
ters hunt these days are the so-called 


| passive candidates — those IT employ- | 


ees who aren’t looking for a new job 


Hands. 
Off Mi 


but who might be enticed away with 
the right offer. 

“A skilled recruiter’s job is to create 
a problem where one may not exist,” 
says Harris. He says good Internet 
recruiters can match a potential candi- 
date to a position and present it as a 
dream job. “If the recruiter doesn’t 


come across like a used-car salesman, 


a reasonable person will listen to a rea- 
sonable offer,” he says. 


Defense Mechanisms 

How can an IT organization defend 
itself against such a reasonable ap- 
proach to employee poaching? 

Some companies are trying technol- 
ogy-based defenses, with only limited 
success, say Internet recruiters. One 
recruiter, who asked not to be named, 
says a company hired him to identify 
employment-related Web sites. The 
company then programmed its 
firewall to block incoming 
e-mail from those sites — 
all 36,000 of them. 

Many Internet 
recruiters say such 
efforts are wasted, 
because they'll get 
to your IT staffers 
at home if they can’t 
reach them at work. 


—— 


COMPUTERWORLD January 22, 2001 


“Technical protection costs you 


| time, money and effort that you could 


invest in building synergies between 


| your company and employees so that 


they don’t read solicitations from re- 
cruiters,” says Gerry Crispin, chief 
navigator at CareerXroads, an inter- 


| national employment consulting firm 
| in Kendall Park, NJ. 


Even stashing employee data behind 


| firewalls isn’t a sure safeguard. Savvy 


Internet recruiters find such infor- 
mation in news articles, white papers, 


| industry association member lists and 


technology groups. 
“Tt’s very difficult for a company to 


Aggressive technical recruiters can 
through your firewalls to access just 
and anyone - they want. Here’s aru 
@ doit and how youcan stop them. By 
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regulate individuals’ names on the 
Web in any meaningful way,” says Bill 
Craib, director of training at Advanced 
Internet Recruitment Strategies 
(AIRS) in Hanover, N.H. 


If You Can't Beat Them. . . 


Instead of fending off Internet 
recruiters, IT organizations are increas- 
ingly joining them by having their 
in-house IT recruiters learn Internet 
recruiting tactics. Craib estimates that 
approximately 75% of his students are 
from corporate IT recruiting staffs. 
Scott G.T. Sloan, director of IT recruit- 
ing at Citadel Investment Group LLC 


"+ ot SO 


\ 


ind their way 
about anything - 
down on how they 
Sharon Watson 
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in Chicago, is a graduate of the AIRS 
course. 

“I love Internet recruiting,” says 
Sloan. His favorite tactic is data mining 
competitors’ and industry conference 
Web sites for candidates. “It’s cost- 
effective and makes it easy for me to 
find the résumés of difficult-to-find 
people in a relatively short time.” 

Some of the résumés that Sloan and 
other internal recruiters find belong to 
their current IT employees. When that 
happens, they say, the smartest re- 
sponse is to approach the employee to 
find out whether there’s a job or man- 
agement issue they can address. 

“Keep an open door,” advises Sloan, 
who promises confidentiality to IT 
employees who bring their troubles to 
him if they aren’t comfortable talking 
to their managers. 


Satisfaction Means Staying Power 

In fact, aggressive recruiters say job 
satisfaction is their biggest obstacle to 
luring away IT employees. 

“Tt is impossible to poach happy em- 
ployees,” says Barbara Ling, president 
of RISE Internet Recruiting Seminars 
in Pelham, N-Y. “Companies should be 
emphasizing retention.” 

Keeping IT employees happy isn’t a 
simple proposition. Recruiters say pay- 
ing market-rate salaries is key — a 
hard lesson learned by Kaiser after 
approximately half of its networking 
employees left the company last year. 
A market salary survey showed that 
while networking position salaries in 
general had increased 20% to 25% in 
the past two years, Kaiser’s had gone 
up only 6% to 8%. 

Kaiser raised the salaries of the en- 
tire networking team by 15% to bring 
them in line with industry norms, says 
Roachell. 

But money is only part of the satis- 
faction equation. Kaiser also tries to 
offer reasonable work hours, give 
people time off with their families, 
foster a diverse work culture and 
provide extensive training programs 
that range from Microsoft and Cisco 
certifications to a new Web Academy 
for IT staff who want to learn new 
skills. All those things, plus good 
salaries, add up to considerable job 
satisfaction, says Roachell. 

Companies that build strong rela- 
tionships with their IT employees will 
do better at fending off Internet 
recruiting tactics, say recruiters. They 
also point out that Internet search 
methods alone can’t lead to success- 
fully recruiting a candidate away from 
another IT organization. 

“It’s all about relationships and keep- 
ing the best interests of the employer 
and candidate at heart,” says Sloan. “If 
you're a bad recruiter to begin with, the 
Internet won't help you.” DB 





Watson is a freelance writer in Chicago. 
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Online Tactics Demystified 


To identify potential job candi- 
dates, Internet recruiters run com- 
plex search strings on the same 
search engines that are available to 
anyone with Web access: Yahoo, 
Google, AltaVista and others. 

These techniques are often so 
tedious that many recruiting firms 
and human resources departments 
are now employing Internet 
“sourcers,” who do nothing but run 
such searches to pull up names for 
further vetting by recruiters. 

Many recruiting consultants 
teach these techniques, often with 
slight variations. While different 
firms may apply different labels to 
them, the following are the most 
popular basic search types and 
possible defenses: 


FLIPPING AND X-RAYING 
To “flip” a Web site means to find 
all other Web links attached to the 
site, especially those that are hid- 
den from view and that aren’t be- 
hind a firewall. Once recruiters 
find those sites, they “X-ray” them 
to find employees’ home pages, 
employee or project directories or 
other sites listing IT personnel. 
Defense: Put employee contact 
information behind firewalls. 
Don’t let employees link personal 
Web pages to your corporate site. 


PEELING OR STRIPPING 
Aggressive recruiters “peel” Web 
addresses that come up on a key- 
word search, stripping back each 
hyperlink in an address until they 
reach a Web page with potential 
contact data. This technique 
thwarts companies that hide 
directories behind nonsense Web 
addresses. 

Defense: Put sensitive links 
behind firewalls. 


HARVESTING OR MINING 
Once recruiters find an employee 
list, they use “harvesting” or 
mining tools to scour it for 
prospects. The use of intelligent 
agent software that can grab 
e-mail addresses based on certain 
criteria is increasing. 

Defense: Don’t put employee 
e-mail addresses or other contact 
data on public Web sites. 


PEER SEARCHING 

“If we can find one person, we can 
find them all,” says Bill Craib, di- 
rector of training at AIRS. Re- 
cruiters say that by identifying 


one person with a specific IT skill 
set, they can use that information 
to track down his colleagues, 
fellow association members and 
others. 

Defense: Difficult. Many re- 
cruiters say they first identify a 
key person from news articles, 
white papers and industry associ- 
ation member lists. 


ANCHOR SEARCH 

An “anchor search” is a basic 

keyword search on a domain, 

using such words and phrases 
as biography, résumé and meet 
our team. 

Defense: Difficult, unless the 
Web site contains absolutely no 
personal — or professional — 
data about any employee. 


E-MAIL 

Aggressive recruiters say they 
avoid sending mass e-mails 
because it usually aggravates 
potential candidates. Once they 
have done their homework, 
however, recruiters will send 
personal e-mails to candidates at 
work or at home. 

Defense: Some companies have 
tried blocking mail from employ- 
ment-related domains. But re- 
cruiters say they will get to your 
people at home if they can’t reach 
them at work. 


EMERGING TACTICS 

Internet recruiters are willing to 
run increasingly abstract searches 
in the hopes of gleaning informa- 
tion that will lead to great candi- 
dates. Judy West, author of Cyber- 
space: Jealously Guarded Recruit- 
ing Secrets, talks about searching 
Web sites for Acrobat files and 
embedded scripts and applets to 
gain access to employee directo- 
ries and user groups. 

Defense: “Your only defense is 
not to put this information out 
there,” West says. “If it’s in the 
public domain, we'll find it.” 


Internet Recruiting Resources: 
The following Web sites contain 
information about Internet 
recruiting books, tools and 
seminars: 


= www.airsdirectory.com 
= www.careerxroads.com 
= www.cyberrecruitingsecrets.com 


= www.riseway.com 
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HOW 
TO AIRE 
ANH-B 


Now, twice as many foreign 
workers can obtain H-1B 
visas annually, and that’s 

setting off a race to find them. 
Consider the experiences 


of companies that routinely 
use H-1B workers to round 
out their IT departments. 
By Emily Leinfuss 


| at Extended Systems Inc., 





| Ask Debbie Kaylor what the best things about hiring for- 


eign national technology workers under the H-1B 


| visa program are, and she quickly cites cultural ex- 


change and “really great Indian dinners.” 

On further reflection, Kaylor, a recruiting manager 
a software development 
firm in Boise, Idaho, says the real advantage, obvi- 
| ously, is getting skilled technology workers during a 
time of great shortage 

With the near doubling this year of the number of 
H-1B workers that can be sponsored annually, Kaylor 
says, many IT managers will soon be discovering this 
source of IT labor for the first time. The intense 
competition for those visas by sponsoring companies 
and the time involved in getting an application ap- 
proved puts the burden on IT managers to learn the 
process quickly. 

“You learn a lot going through the process, but my 
advice is to use an attorney and not to risk making 
| mistakes like filling out the form wrong and getting it 
sent back,” Kaylor says. 

In fact, communication, tenacity and good legal 
| counsel — not to mention a multinational approach 
to hiring — are the best assets to have when using 
the H-1B visa program to fill technical positions. 

Take MasterCard International Inc. in Purchase, 


| NLY., for example. The financial services firm has a 


decentralized organizational structure, with IT staff 
at home locations in Belgium, India and Australia. It 
also has a long-term relationship with Chennai, India- 
based contract management firm Mascon Global Ltd. 
This approach ensures that the majority of Master- 
Card’s H-1B hires are already working for the firm, ei- 
ther at the remote centers or as contract employees. 

MasterCard’s partnership with Mascon helps it fill 
in the gaps with temporary and contract help during 
the H-1B approval process, says Rob Reeg, senior vice 
president of systems development at MasterCard. 

It usually takes six to nine weeks for approval of an 
H-1B application, he says. 

The jobs that MasterCard uses H-1B workers to fill 
range from working on maintenance enhancement 
projects to helping rewrite core transaction-process- 
ing systems. 

“We look for programming skills, C++, Java, 
HTML, database administrators and management 
systems programmers,” 
Card’s senior vice president of human resources. 


The Approval Process 

It’s far easier for applicants with advanced degrees 
to get H-1B visas, says Koenig. H-1B candidates are 
generally highly educated and fill skilled positions. 
And because MasterCard’s centers serve customers 
who represent 27 languages, multiple language skills 
are a definite plus, she says. 

Once a candidate is targeted — meaning he goes 
through the same interview process any other hire 
does and meets the qualifications for the job — his 
visa status is addressed. The total cost of sponsor- 
ship is approximately $5,000, Koenig says. 

The H-1B application process is laborious, so 
Koenig recommends using a legal firm that special- 
izes in the process. 

“You can miss one question or not answer some- 
thing appropriately, and it will get sent back, and you 
have doubled the time it takes,” she explains. 

Waiting for visa approval can be a source of anxi- 
ety for applicants. One software engineer from India 
who works at SAS Institute Inc. in Cary, N.C., came 
to the U.S. 12 years ago and has worked at three 
companies since then. His first eight years were on 
an Fl (student) visa, and the past four years were on 


| ect I was working on was eliminated,” 
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an H-1B. This foreign national worker had to get a 
new H-I1B visa for each of his two earlier jobs. 

“One firm was purchased by another, and the proj- 
so he needed a 
new job, the worker explains. But the waiting process 
for the H-1B was stressful, he says. 

“The dynamic of the job situation, where compa- 
nies are restructuring all the time, makes it seem like 


| you don’t know what is going to happen tomorrow. If 


you are on an H-IB visa, then you can be left without 
anything to hang on to. You can get another job, but 
the process takes a long time,” he says. 

Assimilation, adjustment and differences in cul- 


| ture all come into play when settling an H-1B visa 


holder into a job, says Koenig. Some of the hardest 
things to work out are the cultural differences. 

That’s why MasterCard has a relocation program 
that addresses family concerns, advising foreign em- 
ployees on how to apply for a driver’s license and oth- 


| er typical procedures. Reeg also employs a buddy sys- 


tem on the job, matching newcomers with people of 


| the same nationality to help answer questions. 


| Easing Transitions 


The new regulations governing H-1B visas that 


| were approved last year appear to have addressed 
| the problem of waiting time and some of the other 
| troublesome aspects of the program. 


The new regulations offer workers the ability to 
change jobs more easily, says David E. Yurkofsky, co- 
chairman of the Continuing Legal Education Commit- 


| tee of the New York chapter of the Washington-based 


American Immigration Lawyers Association. They 


| also eliminate the requirement of filing an amended 
| H-IB petition in many corporate restructuring situa- 


tions, extend H-1B status beyond six years and let 
green-card applicants change employers. 

And it’s the green card that’s the brass ring for 
many H-1B visa holders and employers, especially 


| after they make the investment in relocation and 
| training, says Jeff Chambers, director of human 


resources at SAS Institute. 
“We have converted a lot of H-1B visa holders to 
permanent residence after they work out on the job,” 


| he says. DB 


says Carolyn Koenig, Master- | 


TIPS FOR H-1B HIRING 





| 
| 
| 
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Leinfuss is a freelance writer in Sarasota, Fla. 


What happens after the hiring manager identifies a foreign 
nationa! job candidate and wants to hire him? Here are 
some tips from David E. Yurkofsky, co-chairman of the Con- 
tinuing Legal Education Committee of the New York chapter 
of the Washington-based American Immigration Lawyers 
Association: 


»Make sure it's a job that requires a four-year college degree. If other 
workers doing the job didn’t have college degrees at the time they 
were hired (or the mandated equivalent of 12 years’ work experi- 
ence), it is, by definition, not an H-1B position. 


| »Ensure that the job is paying the prevailing wage. This means 


checking the proposed wage against labor department statistics 
for the occupation and geographic region of the U.S. or, if those 
figures aren't available, conducting an independent survey. 

>Use the Department of Labor's fax-back system to obtain an 
approved labor-condition application. 


ALSO NOTE: 

>A company can't hire someone until his H-1B is approved. 

>If the candidate was already working through an H-1B visa at 
another company in a similar type of job, he can begin working 
at the new job as soon as the application has been filed. 


> Other filing requirements and frequently asked questions are 
available online at the Immigration and Naturalization Service's 
Web site: www.ins.usdoj.gov. 
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FINANCIAL & BUSINESS CONCEPTS IN BRIEF 


Service-Level Agreements 


DEFINITION 
A service-level agreement is a con- 
tract that defines the technical 
support or business parameters 
that an application service 
provider or other IT outsourc- 
ing firm will provide its clients. 
The agreement typically spells 
out measures for performance 
and consequences for failure. 


BY DAWNE SHAND 
ORKING with an 
application ser- 
vice provider 
(ASP) can be a 

risky proposition, especially 
for established companies that 
entrust the care and manage- 
ment of core business appli- 
cations to small or emerging 
companies. How can you en- 
sure an ASP will perform well, 
respond quickly to problems 
or perform regular mainte- 
nance checks? 

In its march toward becom- 
ing a legitimate and permanent 
fixture in the IT outsourcing 
landscape, the ASP industry 
has promulgated service-level 
agreements (SLA) as a means 
of mitigating these concerns. 
An SLA provides some assur- 
ance that ASPs will support 
their customers’ business and 
technical objectives. 


Critical Enabler 


Last spring, the American 
Cancer Society Inc. (ACS) in 
Atlanta decided to find an ASP 
to host its Siebel Systems Inc. 
customer relationship manage- 
ment system. 

CIO Zachary Patterson says 
he believed that the ASP model 
would free his organization 
from IT delivery, since tech- 
nology isn’t the organization’s 
core business but is a criti- 
cal enabler. “We were mainly 
concerned with hosting at the 
beginning; now I would rent 
the application,” he notes. 

Patterson says he decided to 





SOURCE. ZONA RESEARCH INC 


take a new approach with 
ACS’s technology vendors: He 
wanted them to become part- 
ners with the nonprofit organi- 
zation. The SLA ACS reached 


last fall with Annapolis, Md.- | 


based USinternetworking Inc. 
to host the Siebel suite would 
be one step in that process. 
The SLA is an “ongoing 
learning experience” for both 
ACS and Patterson’s team, he 
notes. The nonprofit group 
needed an SLA tailored to its 
business’ needs, which Patter- 
son defines as 99.99% avail- 
ability of its enterprisewide 
applications. “We are aiming 





for perfection,” he says, but the | 


organization’s mission — to 


find cures for cancer — com- | 


pels it to strive for nothing less. 


ACS’s top priority, says Pat- | 


terson, is customer satisfac- 


tion, and its SLA reflects this | 
business imperative. As Patter- | 


son says, “Uptime on a router 
means nothing to a business.” 
Patterson worked hard to make 
certain that USinternetworking 
understood what ACS’s service 
meant to its cancer patients, 
volunteers and donors. 

This doesn’t mean that his 
organization’s SLA doesn’t 
address finer technical details, 
explains Patterson. For in- 
stance, ACS does measure per- 
formance metrics such as 
availability of e-mail services. 
However, the SLA’s overriding 
goal — and its relationship 
with the ASP — is the business 
prerogative of service. 


The Evolution 

The business requirements 
fleshed out in the ACS’s con- 
tract with USinternetwork- 
ing reflects how SLAs have 
changed during the past year. 
When SLAs first came into 


’ fashion in 1999, ASPs encour- 


aged their customers to exam- 
ine each piece of the technical 
puzzle, from the routers and 





OLA Wish List 


What changes could be made to your current SLA to meet 


your standards? 


Better guaranteed availability 


Wares) Sree SL 
Better responsiveness to SLA violations 


SEGRE LES) 
More flexibility to modify 
SLA terms 

EER 


Better measurement metrics 


EERE ess 
Reduce the complexity 
of the document 


Better remuneration 
of SLA violations 
RNR Eire 














NUMBER OF RESPONSE 





Base: 81 ASP clients; 15 were asked this question aft 
SLAsmet theirneeds ? i fer ss 











servers to leased lines 


and | 


storage systems. Then, the cus- | 


tomers would weigh the over- 
all importance of each area 
and decide how much uptime 
would be necessary. 

Most ASPs promised 99.9% 
uptime. Although the math 


appears fuzzy and the second | 
unimportant, | 


decimal place 
99.99% reliability means only 
five minutes of downtime per 


month, while 99.95% availabil- | 


ity allows for 45 minutes of 
downtime. For certain applica- 


tions — especially given the | 
vulnerability of the hardware | 
that they run on — it’s com- | 


pletely unrealistic to tell a cus- 
tomer that it will be down for 
only five minutes per month. 
These days, most SLAs fo- 
cus on business requirements. 
SLAs were historically “nego- 
tiated for one piece, such as 


|The SLA should 

be clear and 

| free from com- 
plex language. 

| It should be 
tightly focused 

on business 

needs. 


ZACHARY PATTERSON, CIO, 
AMERICAN CANCER SOCIETY 


an SLA on network perfor- | 


mance,” explains Jay Seaton, 


vice president of marketing at | 
NaviSite Inc., an ASP in An- | 
dover, Mass. “Customers now | 
ask, ‘What about the server? If | 
it goes down, I’m also out of | 


business.’ Ideally, customers | 


should look for comprehen- 
sive SLAs.” 
The business objective, such 


as response time or problem | 
resolution, should take prece- | 


dence over specific technical 
metrics, he adds. 


‘Weasel Words’ 


A second point of contention | 


with SLAs is what David Caru- 
so, a vice president at AMR 
Research Inc. in Boston, refers 
to as “teeth.” ASPs have to feel 
some pain for falling down on 
the job, says Caruso. Typically, 
when an ASP doesn’t meet 
its performance agreement, it 
pays the customer in either 
additional service or dollar 
credits. “I’ve seen some weasel 
words in these SLAs,” Caruso 


notes. “For example, one SLA | 


guaranteed 99.9% uptime but 
didn’t count the first 15 min- 
utes of downtime.” 

Caruso says customers are 
starting to think more about 
“windows of performance.” For 
example, 15 minutes of down- 
time during peak buying hours 
represents a huge problem for 


online retailers, but 15 minutes 
of downtime at 2:00 a.m. proba- 
| bly has fewer consequences. 
|  There’s now a greater effort 
to think through — and specify 
in the SLA — when mainte- 
nance activities are performed 
to avoid interfering with the 
business. Customers and ASPs 
| can differentiate between up- 
time and performance levels. 
| The SLA should reflect these 
| business requirements. 

However, Caruso says he 
has also seen SLAs that have 
been too detailed. “Compa- 
nies should focus on specify- 
ing the mission-critical activ- 
ities,” such as uptime or per- 
formance, he says. 

Patterson makes the follow- 
ing recommendations for com- 
panies that are negotiating an 
SLA: “The SLA should be clear 
and free from complex lan- 
| guage. It should be tightly 
| focused on business needs.” 

In other words, avoid the 
weasel language. B 








Shand is a freelance writer in 
Somerville, Mass. Contact her 
at dshand@netway.com. 





@ Are there business terms you would like to learn about in QuickStudy? Please send your ideas to quickstudy@computerworld.com. 








Do you really know what goes on in the minds of 
your e-customers? What they might be thinking 
about buying? Or not buying? And why? That’s 
where you need e-Intelligence from SAS. With 
e-Intelligence, you can quickly integrate bricks- 
and-mortar data with clicks-and-mortar data. To 
reveal insights that can help you optimize online 
merchandising, recognize cross-selling opportuni- 
ties, build greater customer loyalty, and establish 
more profitable relationships with your very best 
e-customers. To learn more about e-Intelligence 
from SAS, and what it can do for your business, 


phone 1-800-727-0025 or stop by www.sas.com. 


The Power to Know. C€ Sas. 


» €-Intelligence 
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Dear Career Adviser: 


Iam a Macintosh professional who has worked on Web 
development for entertainment and multimedia sites. I 
am interested in streaming media and I’m wondering 
whether, as a Macintosh person, I am at an advantage or 
disadvantage to grow my career at a business-oriented 


company that seems to be 
more stable? What skills and 
applications do I need to 
emphasize in my résumé, and 
what should I look for in terms 
of compensation? 
MEDIA MAVEN | 


| for high-impact Web multi- 


media with short sound ef- 


| fects and loops, especially an- 
| imations. 


Luciw says QuickTime 


| Flash and RealServer are the 


cornerstone applications for 


2 : 
streaming media content 


Dear Maven: 

A company that is more 
business-oriented may have 
less demanding streaming 
media needs than an enter- 
tainment company, says Bill 
Luciw, a Palo Alto, Calif.- 
based digital multimedia con- 
sultant and founder of Fovea 
Studios, a fine art photogra- 
phy studio. 

But if streaming media is 
your bag, as a Macintosh per- 
son your key skills should in- 
volve QuickTime, the center- 
piece of Apple’s multimedia 
technology: RealNetworks’ 
RealServer technology; and 
Macromedia Flash, which Lu- 
ciw deems a great solution 


| creation. 


But perhaps more valuable 


| to an employer than your 
| software knowledge will be 


your understanding of the 
various media formats and 
how they differ in quality and 
space savings via compres- 


| sion technology. This level of 
| understanding is what will 
| showcase your skills. 


There are many content 


| creation and editing tools 


that can output results in 


| these various formats. Know- 


ing which formats are opti- 


| mal in terms of size and qual- 
| ity trade-offs is your value- 

| add for building successful 

| streaming Web sites. With 


both the qualitative judgment 


said. The tests will run at four labo- 
ratories: Sandia and Los Alamos in 
New Mexico; Lawrence Livermore 


| in California; and Pacific Northwest 


Feds Testing E-Mail 


Monitoring Software — 


The U.S. Department of Energy 
(DOE) has confirmed that it’s run- 
ning a six-month test of new e-mail 
monitoring software at four national 
laboratories. The software could be 
used to enforce current guidelines 
for communications regarding nu- 
clear technology and to check for 
security violations. 

Despite reports that the software 
will be used to monitor communica- 
tions with foreigners and foreign 
nationals living in the U.S. following 
the Wen Ho Lee case, a DOE 
spokeswoman said that there’s no 
particular target during the tests. 
The software will be used to moni- 
tor all types of communication re- 
garding the nuclear programs, she 


FTC Seminar to Cover 
' Online Retail Rules 


| The Federal Trade Commission 
| (FTC) plans to hold a seminar this 





| in Richland, Wash., the spokes- 


woman said. The software captures 
e-mail, filters out irrelevant mes- 

sages and sends those that are sus- 
picious to a counterintelligence unit. 





month to help ensure that online re- 
tailers understand and comply with 
its business rules. The seminar, to 
be held Jan. 30 in Tysons Corner, 
Va., will cover regulations that in- 
clude order-fulfillment expectations, 
advertising requirements and pri- 
vacy issues, according to the FTC. 
The seminar comes two months 
after the commission warned or 





and the hard-core technology 
skills under your belt, count 
on annual Bay area earnings, 
for example, of between 
$70,000 and $90,000. 


Dear Career Adviser: 

I’ve been asked to take a job 
as a lead engineer of an IT 
project team in an NT, data- 
communications and telecom 
environment. What do I need 
to do to help organize the team 
and define job descriptions, 
tasks and targets? I know this 
is a significant opportunity for 
me to advance my career. But I 
also need to identify areas for 
improving my own skills. 

— DEEP WATER 


Dear Deep: 

Start by learning some 
project management theory, 
including concepts such as 
work breakdown structure, 
Gantt charts and program 


fined more than 100 online retailers 
for making holiday shipping promis- 


| es they couldn’t keep during 1999 


and 2000, though an FTC 
spokesman said most retailers 


| improved last year. 





Report: Firms Lacking 
Global Online Plans 


Despite expectations of a huge 
| boom in online users abroad, U.S. 
| companies still aren't targeting 


those markets, according to a 
report by Jupiter Research in New 
York. “Of the top 20 Web sites with- 
in five categories (shopping, travel, 
search engine and portals, news, 
marketing and corporate), two- 
thirds of U.S. companies have not 
yet prepared for a global online 
marketplace,” the report stated. 
The report suggests that companies 
trying to globalize should align with 
local companies to gain an under- 





evaluation and review tech- 
nique charts, advises Ryan 
Kish, director of marketing 
communications at Sterling, 
Va.-based AEC Software. 
AEC is a provider of Fast- 
Track Schedule, a cross- 
platform project scheduling 
package that operates in Mac- 
intosh and Windows environ- 
ments as well as on hand- 
helds. This will let you walk 
the walk and talk the talk of 
your new position. 

Then, get down 
to brass tacks by 
writing a mission 
statement and 
defining your 
project, its associ- 
ated tasks, the 
people on your 
team and your 
project’s cus- 
tomers. This can 
be a tricky 
process, particu- 
larly if pre-exist- 
ing commitments 
to other groups 


FRAN QUITTEL is an expert 
in high-tech careers and 
recruitment. Send 
questions to her at 
www.computerworld.com/ 
career_adviser. 
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management packages cover- 
ing software development, 
time and labor costs and team 
collaboration — including 
Web-based teams — at www. 
infogoal.com/pmc/pmcswr.htm. 


Readers Write: 

Career Advisor recently 
cautioned Nervous not to 
relinquish dot-com compen- 
sation gains if he had the 
right credentials. Not every- 

one agreed. One 
reader wrote: 


Nervous was a 
four-year MCSE 
who was reluctant 
to take a pay cut 
after being laid off 
from a start-up. But 
he may have been 
making more than 
he was worth, and 
that could have 
even been the un- 
written reason for 
the layoff. Manage- 





cloud your proj- 
ect’s start, or you are unsure 
of who the customers are or 
who owns each project task. 

Additionally, do your 
homework to select the soft- 
ware package that will help 
you schedule, track and man- 
age the plethora of activities, 
costs, people, functional 
specs for every major and 
minor task and schedules for 
each deliverable. 

There’s a list of project 


standing of local customs, delivery 
capabilities and business practices. 





ETrade to Purchase 
Online Mortgage Firm 


ETrade Group Inc. in Menlo Park, 
Calif., has announced that it will 


| buy Huntington, Calif.-based Loans- 


Direct Inc., one of the nation’s 
largest online mortgage originators. 
The mortgage service will be added 
to ETrade’s banking and brokerage 
offerings. LoansDirect is a virtual 
lender that’s licensed in 47 states. 





FedEx Signs Deal to 
Upgrade POS Systems 


Memphis-based FedEx Corp. last 
week signed a three-year, $27 mil- 
lion contract with Austin, Texas- 
based Wincor Nixdorf LLC for the 


| 
| 
| 
| 





ment of the start- 

up may have made many bad 
decisions, including about 
compensation levels. If Ner- 
vous has good skills, he 
shouldn’t worry so much about 
the future but just get in the 
door of a great organization, 
where recognition and com- 
pensation will follow. Nervous 
sounds like a whiner who got 
spoiled in the temporary dot- 
comAtart-up flare-ups. 

— SALT LAKE CITy CIOD 





installation, integration and support 
of point-of-sale systems in 1,100 
FedEx World Service Centers in the 
U.S. The new systems “will supply 
our employees with more real-time 
information, including tracking and 
tracing of packages, but also infor- 
mation such as international ship- 
ping requirements,” said a FedEx 
spokeswoman. 


Job Moves 


WALTER C. ZERRENNER, 59, has 
been named senior vice president 
and CIO at New York-Presbyterian 
Hospital and Healthcare System in 
New York. He was formerly presi- 
dent of IT consulting firm Zerrenner 
& Associates Inc. in Indianapolis . . . 
JOHN KIM, 40, was named CEO of 
BondBook LLC, an online bond trad- 
ing marketplace in New York. Kim 
was formerly CEO, president and 
ClO at Aeltus Investment Manage- 
ment Inc. in Hartford, Conn. 
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DATACENTER: 
BEHIND THE SPECS 


Microsoft’s Datacenter 
Server enterprise oper- 
ating system includes 
features the vendor says 
make it worthy of host- 
ing enterprise applica- 
tions. But is Datacenter 
really ready for prime 
time? Computerworld 
spoke with Microsoft’s 
Peter Conway about the 
substance behind the 
specs. » 58 


THESTORAGE 
CHALLENGE = 


Users have hoped that 
by throwing away a mix 
of existing storage sys- 
tems and consolidating 
on new, homogeneous 
ones, their storage man- 
agement problems will 
improve. Many head- 
aches do go away, they 
say, but global manage- 
ment of the storage in- 
frastructure remains a 
challenge. » 66 





SECURITY 
JOURNAL 


Security manager Jude 
Thaddeus ponders how 
his firm should adapt to 
new laws that enable 
government surveillance 
and that govern how 
companies can use data 
about individuals. » 59 


EXEC TECH 


Our resident gadget guy, 
reviews editor Russell 
Kay, is in paradise this 
week at the Consumer 
Electronics Show, with 
about a zillion high-tech 
toys to ponder and play 
with. Some of these 
products and technolo- 
gies are powerful and 
far-reaching, while oth- 
ers use technology in 
some weird and wacky 
ways. » 60 


FUTURE WATCH 


LifeFX, a small company 
in suburban Boston, has 
achieved a goal that has 
so far eluded even the 
mightiest of Hollywood 
special-effects studios: 
It’s created a believable 
digital 3-D human. More 
than a novelty, it could 
be the key to new hu- 
man-to-machine inter- 
faces. » 61 








QUICKSTUDY 


Computers don’t under- 
stand English or even 
programming languages. 
What’s needed is trans- 
lation software, and it 
comes in different 
forms: compilers, inter- 
preters and bytecode. 
Learn more about this 
software in this week’s 
primer. » 68 


EMERGING 
COMPANIES 


Looking for processing 
power? Blackstone 
Technology Group ag- 
gregates PCs into com- 
pute farms, using its 








software and services to 
make high-end comput- 
ing power available for 
processor-intensive ap- 
plications. » 70 


JOB WATCH 


In her new role as infor- | 
mation architect at 
GoTo Auctions, Amber 
Link relies on her back- 
ground inthe editorial | 
realm — not IT — to de- | 
sign Web sites that re- | 
flect how readers like to | 
experience and process 
| 








information. We profile 
Link as one of a new 
breed of the Web’s mas- 
ter builders. » 71 


TECHNOLOGY 


IS EXCHANGE 
WORTH IT? 


MICROSOFT'S EXCHANGE 2000 SERVER Offers new bells and 
whistles that take the application well beyond its 
e-mail roots. It also offers many meat-and-potatoes 
improvements that administrators have been 
requesting. But it’s the first Microsoft 

application to require Active Directory 

— an upgrade likely to force major 

infrastructure changes. Are the new 

features worth the effort? 


+) 























Tripwire Updates Its 
Integrity Software 


a Wi 


TECHNOLOGY 


Tripwire Inc. said it will launch this | But does Datacenter’s features checklist 


week an enhanced version of its 
data and network integrity software 
that features greater scalability and 
manageability. 


The Portland, Ore.-based security 


vendor's Tripwire for Server 2.4 will 
let administrators know if changes 
have been made to a system's con- 
tents by comparing a baseline snap- 
shot of the contents with the most 
current version of the contents. 

According to the company, its 
new Tripwire Manager 2.4 will let 
users monitor and manage the in- 
tegrity of data on as many as 2,500 
remote servers and across multiple 
operating environments. Using the 
software, security administrators 
will be be able to quickly find out if 
a system has been broken into or if 
the data and files on it have been 
accessed, deleted or modified. Trip- 
wire Manager 2.4 is priced at 
$6,000, while Tripwire for Server 
2.4 will sell for $595. 


Caldera Launches 
Volution Linux App 


Orem, Utah-based Caldera Systems 
Inc. has released its Volution Linux 
network management software, 
which is aimed at making it easier 
to remotely install and maintain Lin- 
ux systems across networks using a 
browser interface. Volution, priced 
at $2,995 for as many as 10 nodes, 
will let network administrators use 
system policies and profiles to re- 
duce costs and improve reliability 
by monitoring hardware and soft- 
ware inventory, configurations and 
other details, according to Caldera. 


Sun Showcases 
Vendor Compatibility 


Sun Microsystems Inc. last week an- 
nounced that nine of the 25 technol- 
ogy vendors that license Java 2 En- 
terprise Edition (J2EE) have passed 
compatibility testing requirements. 
Application server vendors such as 
San Jose-based BEA Systems Inc. 
and Scotts Valley, Calif.-based In- 
prise Corp. showcased J2EE-com- 
patible application servers at the 
press event, but IBM, a major Java- 
based application server vendor, was 
noticeably absent. 








| newest 


| the 
managers. 


| [go] 


match up with what IT managers need? | 


| the 


ATACENTER Serv- 
er be 
your 
operating system 
— or at least Mi- 


wants to 


| crosoft Corp. wants it to be. 


With features like 32-proces- 


| sor symmetric multiprocess- 


ing support, load balancing 
and clustering capabilities, the 
version of Windows 
looks good on paper. But it 


| takes more than good specs to 
| gain entry to the data center. 


Computerworld’s Robert L. 


Mitchell recently spoke with | 
| Peter Conway, director of Win- 
| dows enterprise server mar- 


keting at Microsoft. They dis- 


up against the competition 


| and how it proposes to meet 
center | 
| tegration of the legacy en- 
| vironment with new class- 


demands of data 


| Q: In the data center, IT managers 


say they’re concerned with main- 


| taining stable applications over a 
| long period of time. Traditionally, 
| Microsoft has forced people to re- 
| evaluate their applications and 
| system hardware every time it 
| comes out with a new operating 
| system revision. Will this happen | 
| a_ forklift 


with Datacenter Server? 
A: No. We will continue to en- 


courage our customers to 


| move forward and upgrade. 


We of course want to be the 
most competitive platform, but 


customers have requirements | 


to stay on versions for extend- 


| ed periods of time, and we've 


made allowances for that. 
For example, our OEM part- 


ners have an extended window | 


of support ... for the base plat- 


form. They have a minimum | 
five-year support requirement. | 
| level commitments from the 


For those relationships that 
beyond | that 


customers. 


| Q: Microsoft says it has made spe- 
| cial efforts to ensure that Datacen- 


ter Server is reliable, yet at least 
some IT managers may be hesitant 
to bring Windows into the data cen- 


| ter, citing a legacy of reliability is- 


enterprise | 








| choice 
| changes. The scalability is of | this as a competitive disadvantage 


five-year | 
| window, we will work against 
the business needs of [those] | 
| to Datacenter would require a 


sues surrounding Windows. What 


of products which offer inter- 
operability and migration of 
applications between Unix and 
Datacenter environments 


| at the network, application, 


is Microsoft doing to change that | 


perception? 


A: We are delivering a combi- | 


nation of product 
support and partners to exe- 


services, | 


cute on the promise of reliabil- | 


ity. Your question actually be- 


lies our problem in that Win- | 


dows is prevalent in the indus- 


try. So, as a result, even if we | 
have 100 customers running | 


over [99.99%] of 
availability, we still get hurt by 
the one customer that’s not 
running at that level. 


| Q: Is there a business case for mi- 
| grating applications to Datacenter 
cussed how Datacenter stacks | 


Server from midrange sys- 
tems from companies like Sun 


| Microsystems and IBM? 


A: These days, with the in- 


es of Web-based applica- 
tions, there is a massive 
amount of innovation go- 
ing on. Many customers in 
a proprietary environment 
lose flexibility over time in 
that they’re tied to a partic- 
ular [hardware] supplier. 
Then they get involved in 
remove-and- 
replace of the hardware, 
and they've got to port the 
application to another en- 
vironment. 

Datacenter offers high 
degrees of reliability and 
scalability and [the] whole 
and flexibility 


standpoint, because [custo- 
mers] can run much larger 
database applications with 


some guaranteed business- 
OEMs to the customers. 
Q: But migrating from, say, Solaris 


forklift upgrade and a port of the 
applications as well, wouldn't it? 

A: Not necessarily. We have an 
interoperability framework. 
We are serious about protect- 
ing our customers’ existing in- 


business | 


| great interest from a features | 
| A: Not at all. It’s not how many 


data and management levels. 
For example, Microsoft Ser- 


ndows in the Heart 
Of the Data Center 


vices for Unix provides a set of | 
interoperability components | 
that make it easy to integrate | 
| Windows 2000 operating sys- | 


tems into existing Unix-based | 


environments. Microsoft In- 
terix provides a robust envi- 
ronment that allows organiza- 
tions to run Unix-based appli- 
cations and scripts on Win- 
dows 2000 directly. 





| Q: Datacenter can support sym- | sion-critical, 





~ COMPUTERWORLD January 22, 2001 





Some syst allow dy re- 
configuration of processor and 
memory resources between those 
partitions without rebooting. Does 
Datacenter server support this? 
A: Datacenter Server includes 
the Process Control tool, a new 
job object management tool 
that allows the administrator to 
dynamically control the alloca- 
tion of system processors and 
memory to specific processes 
and process groups in each op- 
erating system image, without 
rebooting the operating system. 
Our partners who manufac- 
ture and distribute the server 
hardware platforms have dif- 
fering degrees of hardware par- 
titioning, which allows multi- 
ple instances of the Windows 
2000 Datacenter Server to run 
on a single instance of the serv- 
er platform. 


Q: Traditionally, the the most mis- 
high-end applica- 


metrical multiprocessing with as | tions in the data center haven’t run 
many as 32 processors. Some | on Microsoft products. And in 


Unix systems already support 64 


some cases, Microsoft has been 


processors or more. Do you see | locked out of the midrange busi- 


for Microsoft? 

processors you support 
how well you support your 
customer’s complete require- 


| ments. ... I’d rather have 32 


fast industry-standard proces- 


| sors rather than 64 propri- 





etary slow ones. I think I have 
the competitive advantage. 
Feedback from customers so 
far as been very positive. 


Q: In the data center, administra- 
tors may use operating system 
partitioning to run multiple appli- 


vestments and have a variety | cations on the same machine. 


MICROSOFT'S CONWAY: “We think we’re 
the best application platform out there.” 


ness in the data center as well 
because companies don’t 
want the hassle of integrating 
and supporting an additional 
operating system. How can 
Datacenter Server accommo- 
date that? 

A: We've invested signifi- 
cantly in interoperability 
products and technology 
at multiple levels. 

At the lowest level, we 
chose TCP/IP as the base 
connectivity. We support 
[Microsoft Message Queu- 
ing], the [IBM] MQSeries 
protocols, NFS protocols, 
NetWare file and print 
protocols. We support 
SNA Interconnect and 
hosting up through LU6.2 
terminal sessions. 

We think we're the best 
application platform out 

there. You can build it faster on 


| our platform than you can on 


but | 





an alternative architecture. 


Q: What changes will Whistler, the 
pending new version of Datacenter, 
bring to Datacenter Server this 
year? 

A: There will be some modest 
additions in terms of features 
and capabilities, but the data 
center is a place where conti- 
nuity is almost more important 
than lots of new features all the 
time. So I wouldn’t want to set 
an expectation that it’s a major 
server release with lots of new 
features. D 
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Into Sp 


TECHNOLOGY — 
Security Manager Gets 


Laws regulating user data and government 
surveillance may be clear, but how to comply isn’t 


AVING BEEN So uncompli- 
mentary about lawyers a 
few weeks back, I’ve de- 
cided that it’s time I knew 
more about the law — at 

least the law as it affects our IT depart- 

ment. So I’ve been doing a bit of re- 

search into the Byzantine mess of rules 

and regulations that sur- 

rounds our everyday work. 

It’s hard stuff. My respect 

for lawyers is growing, if 

they can put up with a ca- 

reer full of documents of 

this complexity. Mind you, 

they probably say the same 

about IT. 


The Law in Two Acts 

Apart from the issues of 
inappropriate e-mails and 
monitoring that I discussed 
last week, there are two le- 
gal worries at the back of 
my mind at the moment: the 
Regulation of Investigatory 
Powers Act (RIPA) and the 
Data Protection Act (DPA). 

These laws are specific to 
the U.K., but security managers around 


the world face a patchwork of similar | 
laws. For example, the RIPA debate is | 
broadly similar to the Carnivore debate | 


| Spirit of the Law 


that’s been going on in the U.S. Carni- 
vore is the FBI’s (apparently success- 


ful) attempt to enforce monitoring of e- | 


mail traffic by installing “black box” de- 
vices at Internet service providers. 
RIPA takes a similar approach in the 
U.K. but goes quite a bit further. 

At heart, RIPA is the British govern- 


ment’s attempt to extend its powers of | 
surveillance to cover the Internet. The | 


previous law, the Interception of Com- 

munications Act, became law in 1985, 

when few foresaw the rise of mass 
e-mail and the Internet. 

It gives the police and public authori- 
ties broad powers to conduct surveil- 
lance online that are similar to those 
they have off-line, which is reasonably 
understandable. However, as much as I 
dislike the idea of someone potentially 
reading my e-mails, I recognize that 
surveillance is a necessary tool in law 


Manager's 
Journal 





| enforcement — as long as the power to 


conduct surveillance is controlled and 
subject to appropriate checks and re- 
strictions. 

However, RIPA goes further than 
that. If encrypted data is being sent 
over your systems, the act gives the po- 
lice the ability to demand access to the 
encryption key. Obviously, 
they’ve got to prove that 
you've got the key, right? 
Wrong. It is apparently 
enough for them to show 
that you once had it. If the 
appropriate authorities 
can show that you used to 
have the key, it’s up to you 
to prove it’s no longer in 
your possession. 

Ethical issues aside, I’ve 
got to work out how my 
company would comply 
with this in practice. We 
use a variety of encryption 
technologies in a variety 
of places for a variety of 
reasons, and while I think 
it’s very unlikely that we'll 
ever be given a disclosure 
notice under RIPA, we've got to be 
ready to comply with one if it ever does 
turn up. The alternative appears to be a 
potential jail term of up to two years. 


As far as I can work out, we have two 
alternatives. We can comply with either 
the spirit of the law or the letter of the 
law. 

If we comply with the spirit of the 
law, we need a managed framework to 
record copies of any encryption keys 
we use — wherever and however we 
use them. We’ve got to keep these 


records so that we can supply a key if | 


asked — otherwise, it’s easy to show 
that we used to have a copy of the key 
because we encrypted some data with 
it. I have a feeling that if the police ever 
do show up at the door with a disclo- 
sure notice demanding access to some 
encryption keys, they’re unlikely to be 
satisfied with me saying, “We’re not 
quite sure what we’ve done with that 
key. Now, where did I see it last?” 





irit of the Law 


If we do set up a database of encryp- 
tion keys, then we've created a big risk. 
We'd better protect that database very 
well, because if anyone can get access 
to it, they have the keys to our security 
kingdom — they could decrypt any- 
thing we’ve ever encrypted. 

What we need is a proper public-key 
infrastructure (PKI) — a hierarchy of 
keys — managed, controlled and re- 
voked by well-established and solidly 
enforced procedures. Unfortunately, 
PKI implementations aren’t an easy 
task. Although companies like Dublin- 
based Baltimore Technologies PLC 
make some extremely good PKI prod- 
ucts, implementing PKI is something 
you need to approach carefully and 
with a great deal of planning. It’s not 
the sort of project I really want to get 
involved with unless there are some 
very clear, big benefits coming out of it. 


Letter of the Law 

So what if we comply with the letter 
of the law? RIPA says we can’t be forced 
to give up a key if we can prove that we 
no longer have it, so why not set up a 
procedure mandating that we destroy 
encryption keys as soon as we're fin- 
ished with them? That way, we should 
be exempt from having to comply with 
disclosure notices, as we could just 
point to our key deletion procedure and 
say we no longer have the key. 

That’s certainly not very helpful for 
the police, but it seems much easier 
than trying to implement a PKI system 
just so we can give our keys away. I have 


| a feeling, however, that it is not quite as 
| simple as I’ve made it sound, although I 
| haven’t yet worked out why. I’ll have to 
| keep digging a bit deeper into this one. 


Anyone out there know more about it 
than this? 


Data Protection 


The other piece of legislation that 


| concerns me at the moment is the DPA. 


This one is a bit of an odd fish — it’s a 
piece of IT legislation that seems pretty 


| sane and doesn’t seem to have annoyed 


anyone. Everyone who comes across it 
seems to think it’s a good thing — pro- 
tecting the privacy of the individual 
without going so far as to make it im- 
possible to comply with the rule. 

The DPA puts measures into place to 
ensure that if you hold data about an in- 
dividual, then you have to do so with 
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THISWEEK'SGLOSSARY 


Carnivore: An e-mail surveillance sys- 
tem the FBI created and has proposed 
attaching to Internet service provider 
networks to monitor suspicious e-mail 
and Internet traffic. The tool is a version 
of a commercial Windows 2000 appli- 
cation that has been customized to in- 
tercept and view only the e-mail, Web 
browsing activity or other Internet traffic 
of a person named in a court order. But 
Carnivore must scan all the packets 
moving over a network to find those it 
wants to examine, which has alarmed 
privacy activists. 


SECURITYBOOKSHELF 


Cryptonomicon, by Neal Stephen- 
son (Avon Press, 1999). A sprawling, 
intellectual, gripping thriller, with its 
roots firmly set in the insanities that 
surrounded the use of cryptography in 
World War Il. Can you explain how tat- 
tooing a dead butcher, dressing him in 
a wet suit and dropping him into the 
Mediterranean helped the war effort? 
The book spans 50 years, four conti 
nents and a surprisingly large amount of 
computer security. Riveting stuff. 


LINKS: 


www. baltimore.com: Baltimore 
Technologies PLC’s Web site includes 
information on security tools ranging 
from the UniCERT certificate manager 
to MIMEsweeper scanning software 


their consent, and it must be accurate, 
held securely and used only for the cor 
rect purposes. It’s been brought into 
force over the past few years, with its 
powers steadily increasing every year, 
although I’ve never heard of any com- 
panies getting prosecuted for failing to 
comply with it. 

The U.K. data protection commis- 
sioner has just put out a code of prac- 


| tice setting out how we should manage 
| employee data. It’s all very sensible 


stuff, but like all such regulatory docu- 
ments, it’s written in very precise lan- 
guage — 77 pages of very precise lan- 


| guage, in fact — and I have to try to 
| work out what we actually have to do to 
| comply with it. 


Nevertheless, we have managed to 


| comply with one part of the code of 


practice very quickly. Apparently, we 


| have to make sure to “provide a means 
| by which managers can effectively ex- 


punge e-mails they receive or send from 
the system and make them responsible 
for doing so.” Simple —they’ve got the 
delete key, haven’t they? D 





® This journal is written by a real security manager, whose name and employer have been disguised for obvious reasons. It's posted weekly at www.computerworld.com to help you and our security manager - let's call him 
Jude Thaddeus - better solve security problems. Contact Jude at jude.t@lycos.com or click on Computerworld.com’s Security Watch community forum to participate in discussion topics. 
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Our resident gadget guy is in paradise this week, with 
about a zillion high-tech toys to ponder. By Russell Kay 


HE International 
Consumer Elec- 
tronics Show 
(CES) in Las Ve- 
gas brings home 
the exciting reality of “con- 
vergence,” the big buzzword 
that refers to the coming to- 
gether of computing, commu- 
nications, the Internet, broad- 
casting and entertainment. 
During my last visit to Las 
Vegas, for the Comdex/Fall 
show [Technology, Nov. 20], I 
was struck by the changing 
mix of exhibitors, with an 
influx of new companies and 
technologies, and the absence 
of some notable computer in- 
dustry stalwarts. I heard a 
number of people comment | 
that Comdex was feeling more 
like the CES. Being at the CES 
for the first time, I can report | 
that this show is a whole lot 
more fun and more interesting | 
than Comdex has been in years | 
— or, possibly, ever. 
Some of these products and | 
technologies are powerful 
and far-reaching, while 
others are just weird 
and wacky. 





I didn’t think that anyone | will cost about $10 each. I hope 


could or would try to create 
yet another format of remov- 
able storage to compete with 
the current bewildering array 
of memory devices: compact 
flash, smart media, multimedia 
card (also the virtually indis- 
tinguishable secure digital 
card), Imation Corp.’s Super- 


| Disk, Iomega Corp.’s Zip and | 
Clik (renamed PocketZip), Ei | 


Corp.’s Q-Drive and IBM’s 
Microdrive. 

But one of the first things I 
saw was a brand-new optical 
disk format that’s about the 
size of a quarter — smaller 
than the 40MB PocketZip — 
but holds 250MB or S5OOMB. 
Called DataPlay, it’s from Ima- 
tion in Oakdale, Minn. (www. 
imation.com), which was dis- 
playing prototypes of drives, 
although real products 
appear until 
at least September. 

The disks 


won't 


SHOWN HERE slightly 
larger than life-size, the 
Zio SmartMedia reader 
is a model of packaging 
efficiency. 








Imation has better luck with 
this than it did with its 1ZOMB 
SuperDisk, whose drive would 
also read and write to standard 
144MB floppies. That was a 
great idea, but it never went far 
in the marketplace. DataPlay 
was awarded the CES Best of 
Show award for a Lifestyle 
product. 

I saw several new readers for 
the flash memory cards used 
by digital cameras, personal 
digital assistants (PDA) and 
music players. The neatest of 


the bunch was Zio from Micro- | 
tech International Inc. (www. | 


microtechint.com) in North 
Brandford, Conn. 

Most of these flash readers 
are significantly bigger than 
the media they read, with a 
Universal Serial Bus (USB) 
cable coming out the back. 

The Zio reduces the size of 
the reader to the bare 
minimum needed to 
contain the connector, 

and it eliminates the ca- 
ble entirely — the whole 
reader just plugs into the USB 
port. It’s a clever idea, though 
it won’t work too well on lap- 
tops whose USB ports are ori- 
ented vertically. Still, most 
newer machines opt for the 
horizontal format. 


Neat Stuff From the Fringes 


As usual, I found the greatest 
number of interesting and in- 
novative products on the 
perimeter of the show floor — 
those booths near or facing the 
outside walls, where traffic is 
lower, booths are smaller and 
rents are cheaper. 

Controlled power: Zensys USA 
Inc., a Danish-American com- 
pany in San Francisco, (www. 
zen-sys.com), was showing a 
wireless system for controlling 
home appliances and lights. 
It’s a far cry from the old pow- 
erline X-10 systems and looks 





quite promising. A sensor plugs 
into the wall, and you plug 
a lamp or appliance into the 
sensor. The programmable re- 
mote-control unit is horizontal 
in layout, with an LCD screen. 
Unfortunately, Zensys doesn’t 
currently have a product de- 
signed for the type of plugs 
we use in the U.S., though it’s 
looking for partners. I hope the 
company succeeds; I'd like to 
get a few of these units for my 
home. 
Just in case: AccuCase LLC 
(www.accucase.com) in Teme- 
cula, Calif, was showing an 
extensive line of carrying cases 
for PDAs, cameras, CD players, 
binoculars, sunglasses, cell 
phones, Global Positioning Sys- 
tem receivers, knives and more. 
They look like the sort of black 
“ballistic” nylon cases you see 
everywhere, but they aren’t 
nearly as soft as they look. 

Instead, the nylon is bonded 
to a firm closed-cell foam, with 
the result being very good pro- 
tection. The only downside is 
that if your camera or cell 
phone doesn’t quite fit, there’s 
no forcing it. Still, these are 
well-made cases and, if they 
fit your gear, highly recom- 
mended. Retail prices run from 
$16 to $32. 
Now you really see it: An odd- 
looking device shown by 
Taiwan-based Nikko-Energy 
Technology Corp. (www.ni. 
energy.com) turned out to be 
a self-contained magnifying 
camera, the Micro-Eye MS- 
228. Just attach it toa TV mon- 
itor and set it on top of what- 
ever you want to inspect. It has 
two magnifications — 40X and 
140X — and it’s very sharp. No 
U.S. distribution or pricing is 
currently available. 
Dick Tracy, your wristwatch is 
ready: Timepieces are an inter- 
esting part of the CES, and 
their functionality gets ever 
greater. Middlebury, Conn.- 
based Timex Corp. was show- 
ing its Internet Messenger 
watch, developed in conjunc- 
tion with Motorola Inc. in 
Schaumburg, Ill, and SkyTel 
Communications Inc. in Jack- 
son, Miss. The watch is a full- 
fledged pager, plus you can 
send e-mail messages or Web 
content to it. It’s significantly 
smaller than its predecessor, 
the Beepwear pager watch. 
There’s a vibrating alert signal, 
and the watch automatically 
sets the correct time from 
SkyTel. 

Tokyo-based Casio Com- 
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THE MICROCAMERA shows 
Washington’s eye on a $1 bill. 


THE MUSLIM CLOCK issues a call 
to prayer five times daily. 


puter Co. in Tokyo was show- 
ing a wristwatch with a built-in 
digital camera (though it takes 
— and displays — only mono- 
chrome pictures 120 by 120 
pixels in size), and PC-Unite, 
which can download your 
schedule, contacts and to-do 
list from Microsoft Outlook. 
The two clocks I liked best 
are radically different. One of 
them is a playful wall clock 
whose pendulum is a glowing 
plastic Slinky. The other is a 
talking clock that looks like an 
Islamic mosque. It chants the 
azan, or Muslim call to prayer, 
for three and a half minutes, 
five times each day. It also an- 
nounces the hours and has a 
105-year calendar. 
See your CDs: I keep most of my 
software library of CD-ROM 
disks in two binderlike cases 
made by Case Logic Inc. in 
Longmont, Colo., each capable 
of holding 256 disks in trans- 
parent plastic sleeves, eight 
per leaf. For 2001, Case Logic 
has redesigned these cases to 
lie flatter, making retrieval eas- 
ier, and it has upped the capac- 
ity to 264. The company also 
has smaller cases. 
Faster links: With the increasing 
acceptance of the IEEE 1394 
standard for a fast serial con- 
nector (better known as Fire- 
Wire), how do you retrofit your 
desktop for this new connec- 
tion? Belkin Components in 
Compton, Calif. has an inter- 
esting answer to that: a combo 
FireWire/USB card that fits 
into any desktop Peripheral 
Component Interconnect slot. D 
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Is It Real 
Is It Life 


THE YOUNG WOMAN is real. LifeFX collects data describing the structure of her face and 
creates a digital skeleton. Bone, muscle and skin are later mapped onto the skeleton. 


A3-D digital human 
could answer phones 
and staff your ne 
desk - and it would 
never lose its temper 
or forget aname. 

By Sami Lais 





SMALL COMPANY in subur- 
ban Boston has achieved a 


goal that has so far eluded | 


even the mightiest of Hol- 


lywood special effects ma- | 
| chines — it has made an image of an old 


woman smile convincingly. Digitally. 


stead of bits and bytes, she is a digital 
creation of LifeFX Inc. in Newton, 


Mass. What is most remarkable about | 
her is that she moves and speaks in a | 
| facial movements of the stand-in, and | 
| the audio e-mail is sent. To see and hear | 
the e-mail, recipients also must down- | 


lifelike way, even when viewed so close 
you can count her pores. 


The goal of creating a lifelike human 
animation has been elusive because we | 


move so many muscles as we speak or 


even listen. Brows knit, eyes roll, lips | 
curl up in a smile then purse, cheeks | 
puff out. The skin is smooth or wrin- | 
kled, it has large or small pores, it draws | 


taut or crinkles at eye corners. And con- 
sciously or not, we notice every little 
detail. 

LifeFX’s old woman isn’t perfect — 
her eyebrows aren’t symmetrical, her 
smile is a bit crooked — and that may 
be the secret of the company’s success. 

“It is its imperfections that makes 
something look real,” says Louis Lath- 


am, an analyst at Gartner Group Inc. in | 


Stamford, Conn. 
Video game developers first made a 








perfect computer-generated spaceship, 
but “its perfectly smooth, shiny surface 
looked cheap and unreal,” Latham says. 
“They found that by adding some dings 
and scuffs, and making it less perfect, 


| they made it look more real,” he says. 


Initially, LifeFX had its eye on the 


| entertainment field, says Lucie Salhany, 


co-president and CEO of LifeFX. “But 
as the Internet grew, we saw a growing 


| need for a better human-to-machine 


interface.” 
The company also has strong roots 
in medical research. Early models were 


built to increase understanding of 


human physiology and for use in tele- 
medicine and distance learning. 

LifeFX builds the human head from 
the inside out, first describing eyeballs 
and tongue and how they move. Then 
the teeth and jaws. It builds a skull 
and attaches each muscle, then covers 
its flayed human with skin. Each bit 
of flesh and bone, each ligament and 
tendon and how it moves is digitally 
described. 

As the digital human blinks, the 
application draws on this 3-D database 
to describe how underlying muscles 
cause the eyelid to fold back into itself, 
drawing the skin with it. 

By altering the database to reflect 
the changes that occur with age — a 
decline in bone and muscle mass, joint 


| flexibility, and muscle and skin elastic- 


& “| 


ity — and how those alterations in char- 


acteristics affect the way the body | 
| moves, the application can digitally age 


a young woman. By adding a text-to- 
speech engine, LifeFX’s digital crea- 
tures speak in a lifelike way. 


LifeFX’s first commercially available | 
product, Facemail, was released last | 


month and is available free at the com- 
pany’s Web site. Facemail offers users a 


choice of five different 3-D digital stand- | 
| ins to deliver their e-mail messages. 
Made not of flesh and blood but in- | 
| player, users select a stand-in, who will 
deliver their talking e-mail. Users type | 


After downloading the free Facemail 


their message, a text-to-speech engine 
converts it to audio and syncs it with 


load the Facemail player. 
By adding any of a half-dozen “emot- 


icons,” users can cause their stand-ins to | 


make an appropriate facial expression at 


a particular spot in the message. For ex- | 
ample, instructing the image to wink as | 
it says, “You want me to work the week- | 
end? Oh, sure, sign me up for that,” | 
would presumably clear up any confu- | 
sion over the likelihood that you will | 


show up for work Saturday morning. 


In simplifying the software to run | 
over low-bandwidth connections, some | 
verisimilitude is sacrificed. If the stand- | 
ins are less convincing, the audio and | 


video are at least in sync. 
Later this year, Facemail will let users 


| speak into a microphone and have their 


stand-in deliver the message. 

By the end of next year, users will be 
able to send LifeFX a digital or analog 
photo of themselves and get a stand-in 
of themselves to use in e-mail, chat 
rooms and instant messaging. D 





Novelty or New 
Business Tool? 


The novelty of having a digital human 
read your e-mail aloud will attract Face- 
mail's first users, but its effectiveness as 
a business tool will retain users, say 
spokesmen for LifeFX. 

The company last month released 
its first commercial product, Facemail, 
which lets users select one of five stand- 
ins, as LifeFX calls its digital avatars, to 
deliver their e-mail. 

LifeFX is negotiating with two For- 
tune 100 companies to license the 3-D 
talking heads for use on their Web sites, 
says Lucie Salhany, CEO and co-presi- 
dent of LifeFX. 

“Shopping-cart abandonment is a big 
problem,” she says. “Supposing there’s 
someone to help you through the 
process, or even to say, ‘Are you sure 
you don't want to buy this?’ ” 

Perhaps, says Jackie Fenn, an analyst 
at Gartner Group. “But if you’re at work 
and you're busily buying a sweater on- 
line, you may not want someone on your 
screen announcing it,” Fenn says. 

And although Facemail's inflection 
and visual cues may cut down on misun- 
derstandings engendered by e-mail, as 
LifeFX claims, “it may prove disruptive 
in an office full of cubicles,” according 
to Fenn. 

But e-mail is only the beginning, says 
Mark Sagar, vice president of research 
and development at LifeFX. By linking 
the visual technology to artificial intelli- 
gence and an English discourse engine, 
a lifelike digital human can interact with 
users. 

“Think of a HAL-like creature,” Sagar 
says, referring to the computer in Stan- 
ley Kubrick's film 2001: A Space 
Odyssey. 

“It's a natural for telemarketing, call 
centers, help desks, any repetitive 
tasks,” Sagar says. 

It can also cut costs, adds Salhany. 

The average customer service call 
costs $25 to $33 per incident. Think of 
the savings if you can automate that,” 
she says. 

Much of what its avatars can do can 
also be done “in text, but it's cold,” Sal- 
hany says. 

“The biggest difference [the technol- 
ogy offers] is in adding sound,” Fenn 
says. But in “online retail, for a help 
desk, it could work. People react differ- 
ently when a machine is humanized. 
Look at speech recognition - people 
start saying please and thank you, and 
they know they're talking to a machine.” 

~ Sami Lais 














XCHANGE 2000 SERVER, the successor 
to Microsoft Corp.’s Exchange Server 
5.5, offers new bells and whistles that 
take the application well beyond its 
e-mail roots. It also offers many 
meat-and-potatoes improvements 
that administrators have been re- 
questing. 

But Exchange 2000 is also not your 
typical upgrade. This is the first major application 
from Microsoft that requires Active Directory (AD) 
— in other words, you can’t implement Exchange 
2000 until you upgrade all of your Exchange servers 
to Windows 2000 and create an organizationwide 
AD structure. This is, in fact, a daunting task that’s 
been slowing down many Windows 2000 Server im- 
plementations. 

In short, Exchange 2000 Server is a major infra- 
structure upgrade that will take time to plan and 
implement correctly. 

“What people have to do to move to Exchange 
2000 is a lot of work,” says Joyce Graff, an analyst at 
Stamford, Conn.-based Gartner Group Inc. “If you 
don’t have the whole top-to-bottom Microsoft solu- 
tion, you don’t feel all the benefits.” But, she adds, “I 
think this will be one of the drivers for [organiza- 
tions to migrate to] Windows 2000.” 

Exchange now includes collaborative features such 
as instant messaging and the Web Storage System — 
a universal, fully indexed container for e-mail mes- 
sage folders and Microsoft Office documents that 
users can access through Windows Explorer, a Web 
browser or an Outlook client. And a new add-on, Ex- 
change 2000 Conferencing Server, adds application 
sharing and multicast videoconferencing services. 

E-mail improvements include support for Multi- 
purpose Internet Mail Extensions content and Sim- 
ple Mail Transport Protocol (SMTP) routing, as well 
as the ability to consolidate routing groups and dele- 
gate administrative tasks at a more granular level 
than Exchange 5.5 supports. Administrators can now 
chop up those ever-expanding message databases 
into smaller, more manageable ones. And enhanced 
clustering support enables both server consolidation 
and improved fault tolerance. 


Reasons to Migrate 

One benefit of migrating to Exchange 2000 is serv- 
er consolidation. 

“In our larger locations, where we have 2,000 or 
more people, we think we'll win from the consolida- 
tion. They will have less servers to administer,” says 
Vicki Fredrick, IT director at Aventis Pharmaceuti- 
cals Inc. But, she warns, “we’re not ever going to sell 
this purely on administration. We’re selling it as an 
integrated platform.” 

Bridgewater, N.J.-based Aventis has 50,000 e-mail 
users on 18] Exchange 5.5 servers in 100 locations 
worldwide. In the pilot phase of Aventis’ migration 
to Exchange 2000 at its Kansas City, Mo., offices, the 
company consolidated 4,500 Exchange 5.5 users on 
nine servers onto just two Exchange 2000 servers. 

“You couldn’t do this under the previous architec- 
ture of Exchange,” says Henry Creagh, a consultant 
at Aventis. “The main reason why most places have 
so many Exchange servers is because they didn’t 
want their Exchange database that had all the user 
mail to get too large. [If it did,] they couldn’t back it 
up and restore it to meet their service-level agree- 
ments,” he adds. 

And there was another incentive to keep databases 
small, says Graff: Exchange 5.5 databases larger than 
60MB have experienced reliability problems. 
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And since Exchange 5.5 only supported one data- 
base per server, the number of databases — and thus, 
of servers — multiplied. Exchange 2000 can host up 
to 20 message databases on one server. This results 
in smaller databases with faster backup and restora- 
tion times, Creagh says — and fewer servers. 

“You're saving [on] floor space in the data center, 
licensing [and] the number of servers you'll ever 
have to put a service pack to or hot-fix. It’s less to 
watch, less to pay for,” he says. 

Graff says she agrees that multiple message data- 
bases help administrators get around this problem, 
but she warns that managing those databases be- 
comes more complex. “That’s one of the things that’s 
making people think,” she says. 

Dan Guttman, manager of messaging technology 
and operational systems at The MTVi Group Inc., 
the online arm of New York-based MTV Networks, 
says the added fault tolerance provided by Exchange 
2000's active-active clustering made the transition 
worthwhile. MTVi consolidated 850 users attached 
to Exchange 5.5 servers in three sites onto two clus- 
tered Exchange 2000 servers. 

At MTVi, “there was zero tolerance for lack of 
mail flow,” Guttman says. Active-active clustering al- 
lows services to be active on both cluster members, 
so each can host mailboxes during normal operation. 
When one server fails, the other automatically takes 
over the failed server’s mailboxes. Guttman says that 
during testing, when beta versions of Exchange 2000 
failed, “users never knew there were problems.” 

Graff says she sees clustering as a step forward but 
cautions that it’s still not transparent. The fail-over 
process may take 10 to 30 minutes, and users will 
have to log back in, she says. 

One reason not to proceed right away with an up- 
grade is because end users will see little benefit, says 
Graff. “What [Microsoft] has done is work a lot on 
the plumbing, but they’re not the kinds of things that 
end users will appreciate out of the box,” she says. 

One thing that’s missing, for example, is a new 
desktop client. “The client/server interaction be- 
tween Outlook and Exchange does not significantly 
improve until Office 10,” the current name for the 
successor to the Office 2000 suite, which is due to 
ship later this year, says Graff. But she says she does 
see one user benefit: The new Outlook Web Access 
(OWA) client, which allows users to access their Ex- 
change e-mail through a browser, is a significant im- 
provement for users, and it allows administrators to 
support more OWA users on fewer dedicated front- 
end OWA servers. 

Finally, the newly minted collaborative features in 
Exchange 2000 are limited. “The functionality is 
very light and not well integrated,” Graff says. “Mi- 
crosoft has made strides, but [it’s] still about a year 
and a half behind [Lotus Notes].” And applications 
that leverage these features have yet to arrive, which 
means end users will see little benefit today, she adds. 


The Infrastructure Challenge 


Perhaps the biggest challenge in installing Ex- 
change 2000 is the infrastructure changes that are 
required. The Windows 2000 AD replaces Exchange 
5.5 as a repository for user account attributes and 
information. So at a minimum, administrators must 
upgrade all Exchange 5.5 servers to Windows 2000 
and install at least one Windows 2000 server on 
which to create an AD structure. 

“Most people are not going to do this over a short 
period of time,” says Graff. 

Aventis decided to upgrade its Windows NT do- 

Continued on page 64 
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VICKI FREDRICK, IT director at Aventis Pharma- 

ceuticals, predicts that with Exchange 2000, “in 

ame our larger locations, where we have 2,000 or more 
people, we think we'll win from the consolidation.” 
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main controllers first. “We knew we wanted to move 
to Exchange 2000, so we knew we had to start plan- 

ning our Windows 2000 deployment,” says Fredrick. 

MTVi upgraded its print servers and Exchange 
servers, but it didn’t have to worry about its Unix- 
based file services, Guttman says. 

Aventis began upgrading its Windows NT domain 
controllers to Windows 2000 and creating an AD for 
its 50,000 users last February; it finished on May 2. 
Next, Aventis used Exchange 2000's Active Directory 
Connector (ADC), a utility that imports the Ex- 
change 5.5 user account attributes and the public 
folder structure into AD and maintains ongoing 
“connection agreements” between AD and Exchange 
5.5 directories to keep them synchronized. 

Fredrick stresses the importance of having a fully 
populated directory before using ADC. “If you don’t 
have your [AD] accounts there, you don’t have any- 
thing to populate,” she says. 


Weighing Your Options 

That’s true, but you don’t have to fully deploy AD 
and Windows 2000 to install Exchange 2000, claims 
Ken Ewert, program manager at Microsoft. For Win- 
dows NT 4 users for whom no AD account exists, 
the ADC puts a disabled “placeholder account” into 
the AD to hold the user’s Exchange account informa- 
tion, he says. In this way, the Windows NT/Exchange 
5.5 users “have a presence on each location,” and that 
presence “is kept in syne with the ADC,” he says. 

But, he adds, “you will have duplicate accounts for 
those ... users,” and when you're ready to migrate 
those Windows NT user accounts to Windows 2000, 
you must run a utility to merge the new migrated AD 
account and the placeholder account. 

Both Aventis and MTVi avoided this by upgrading 
their domain controllers to Windows 2000 and cre- 
ating and populating a complete AD structure be- 
forehand. Besides, says Creagh, “if you do it the oth- 
er way, you'll lose the current [Windows user ac- 
count] passwords. In an enterprise company, that’s 
not acceptable.” 

At Aventis, getting the new address book clean and 
stable was a big effort. “We spent that week just 
checking our directory,” Creagh says. One problem 
was the existence of inactive mailboxes and multiple 
mailboxes associated with a single user account 
When the ADC finds multiple mailboxes for one 
user account, it takes in the first one and discards the 
others, he says. “You need to go through and tag the 
ones that shouldn't be matched up,” he says. Creagh 
suggests that administrators weed out these mailbox- 
es before running the ADC to save time. 

About a week after completing the directory, 


You've got to 
look at it as a 
complete platform, 
and that scares 
a lot of people. 


VICK! FREDRICK, IT DIRECTOR, 
AVENTIS PHARMACEUTICALS INC. 
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Aventis set up its first Exchange 2000 server. 

Both MTVi and Aventis used new server hardware 
and moved mailboxes over from the existing mail 
servers. “This is not an in-place upgrade; you mi- 
grate,” says Gartner’s Graff. “You build a parallel sys- 
tem, and you migrate these users from the Exchange 
5.5 tower to the Exchange 2000 tower.” 

Aventis also created a test system that mirrored 
the production environment before going live. “In 
years past, we'd have a lab but install everything 
clean,” Creagh says. “Don’t generate [test] data; use 
your production data, and you'll be surprised what 
you learn from it.” 

MTVi and Aventis are both still running Exchange 
2000 in parallel with Exchange 5.5 servers. In this 
mixed-mode environment, says Creagh, you're stuck 
with remote procedure call communication between 
the new and old routing groups rather than the 
faster, industry-standard SMTP. And you can’t sepa- 
rate routing groups from administrative groups — a 
critical feature if, like at Aventis, you want to central- 
ize control of routing groups but delegate other ad- 
ministrative functions within a large organization. 
“We don’t want the local administrators messing 
around with the routing,” Creagh says. 

“We're not going to realize the full impact of this 
until we’re further down on our migration,” Fredrick 
acknowledges. And in a company the size of Aventis, 
that takes time. “It will probably [take] the next two 
years to have [all 50,000 users] migrated,” she says. 

Both Aventis and MTVi have also set up new Ex- 
change features, such as instant messaging, confer- 
encing and OWA, on separate servers. But Aventis is 
still focused on getting the basic Exchange functions 
in place. “If you don’t start in a methodical order, 
you're going to end up with a mess,” warns Fredrick, 
noting that OWA and instant messaging require de- 
ploying new desktop client software and browsers. 

Aventis and MTVi both say they’re impressed 
with the value of instant messaging. But the inability 
of Exchange's instant messaging to work with other 
messaging systems is a problem for business-to-busi- 
ness communications, says Graff. 

“This is one of the biggest mistakes Microsoft is 
making. By stressing the need for homogeneity, 
they’re missing the point,” she says. And ironically, 
while the NT and Exchange directories are now inte- 
grated into AD, instant messaging isn’t. It uses a dif- 
ferent client and directory, Graff says, so user infor- 
mation must be entered and managed separately. 

IT managers considering a move to Exchange 2000 
should plan carefully and move slowly, current users 
say. “My advice is to plan out your Active Directory 
well in advance, create a test environment and put a 
good deal of thought into it,” says MTVi’s Guttman. 

Fredrick says she agrees: “You have to look at the 
big picture. This is an architectural change.” 

Graff suggests waiting. “It’s not going to be easy to 
implement, and end users aren’t going to feel the 
benefits. We've suggested that people hold off until 
the middle of 2001,” when Office 10 and the new Out- 
look client become available, she says. 

But Guttman says he thinks the back-end benefits 
are compelling. “The simplification of administra- 
tion for Active Directory is worth it,” he says. “It ac- 
tually decreased administrative costs for us.” 

Fredrick stresses that it’s a big project. 

“If you really want to take advantage of all the 
components, you can’t leave anything out,” she says. 
“You can’t leave security out. You can’t leave the net- 
work out. You can’t leave the desktop out. You've got 
to look at it as a complete platform, and that scares a 
lot of people.” D 
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EXCHANGE 
SERVER 2000 


Active-active clustering improves fault 
tolerance 

New Outlook Web Access can support more 
users on fewer front-end servers 

Adds new collaborative features like instant 
messaging and the Web Storage System 
« Can delegate tasks to administrators with 
more granularity 


fava % © Requires at least 
CONS ===: 
. 4 © your organization's 
infrastructure to Windows 2000 
Requires the creation of an organizationwide 

Active Directory structure 

» Deployment across a large enterprise could 
take a year or more 

« Some features aren't available until all users 
are moved over 

« Third-party programs like backup software 
may not yet support Exchange 2000 

« Most immediate benefits are to administra- 
tors; users won’t see much difference until the 
release of Office 10 Outlook later this year 





Word is, a flood caused a fire in a substation. 
Relays trip. Lights dim. Hard drives spin down. 
Data packets stall like subway cars in a tunnel. 
An intern shows up with candles. And matches. 
Somebody then appears with take-out dinner. 
“So what’s the recovery plan for all of the data?” 
someone asks. Nobody answers. Who knows? 
Storage is on the same network as the servers. 


The servers will be back. The data won't. 


| Companies spend over $11 billion a year to recover lost data. An IBM Storage Area Network can ensure 
that in a disaster, your data will be available where and when it’s needed. Find out about storage 
8 solutions from IBM at a SAN Solution Center. Call 1800 426 7777 to learn more and find a center near you. 
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HEN UPMC HEALTH 


System wanted to bet- 


ter manage storage 
and backups for a di- 
verse array of com- 
puter systems across 
the company, the 
Pittsburgh-based 
health care provider 
decided to consolidate by building 
storage-area networks (SAN). 

The SAN arrays and StorageWorks 
management software from Compaq 
Computer Corp. have helped ease 
management headaches, says Joe Fur- 
manski, UPMC’s manager of systems 
and planning. But in a multivendor- 
system environment, the new Compaq 
management tools still can’t do it all. 


“{Storage Works] isn’t across the line, 


and it isn’t one robust tool,” Furmanski 
says. “We're looking at [other] vendors 
to provide us true management soft- 
ware so it isn’t little point products 
here and there.’ 

Bringing in enterprise-class — and 
often single-vendor — storage subsys- 
tems helps bring order and manage- 
ability to growing storage require- 
ments, IT managers say. But while the 
management software sold with these 
systems serves many key functions 
well, some tools may be lacking, and 
no tools are yet available that provide 
truly centralized control across all en- 
terprise storage resources, say users 
and analysts. 

“They’re testing it out and finding 
that a lot of the storage management 
issues are still to be worked out,” says 
Anne Skamarock, an analyst at Boul- 
der, Colo.-based Enterprise Manage- 
ment Associates Inc. 


Mix-and-Match Management 

UPMC built its Compaq SANs 
around legacy computers and storage, 
including Windows NT file servers, 
Digital Equipment Corp. VAXs with 
OpenVMS, Sun Solaris systems, IBM 
systems running variants of Unix, and 
OS/390 mainframes. The new system 
includes StorageWorks Enterprise 
Storage Arrays and Enterprise Modu- 
lar Arrays 

The health care company originally 
introduced StorageWorks manage- 
ment software five or six years ago, 
when it added SCSI-attached storage 
devices to OpenVMS and NT systems, 
says Furmanski, who oversees 55 
mixed-vendor Unix servers and sever- 
al minicomputers and workstations. 
Jim Vellella, associate director of tech- 
nical services and Furmanski’s coun- 
terpart on NT systems, manages 240 
Compag ProLiant servers, most of 
which still use direct-attached SCSI 
storage 

The new SANs also play a role in 
managing backups. Two data centers 
in Pittsburgh hold 30TB of data be- 
tween them, and UPMC uses 300 digi- 
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tal linear tape drives to fill nearly 
8,000 tapes. The data center staffs 
(about 20 people in total) spend 40% 
of their time on storage management 
issues. “Most of the things we do are 
24/7, so there aren't a lot of backup 
windows,” says Furmanski. 

“It’s getting to be a lot of work for 
our people to do,” Vellella adds 

The company also uses Storage- 
Works for SAN configuration, moni- 
toring and alerts, and Mountain View, 
Calif.-based Veritas Software Corp.'s 
Backup Exec for backing up the NT 
servers. Vellella also uses network per- 
formance monitoring software from 
San Jose-based NetIQ Corp. 

UPMC is looking for a more com 
prehensive tool that will manage stor- 
age across the enterprise as it begins to 
tie the systems together. The company 
is investigating software that Vellella 
says will be more scalable. These prod- 
ucts include backup software from 
Veritas and Mountain View, Calif.- 
based Legato Systems Inc. and broader 
products such as Houston-based BMC 
Software Inc.’s Application-Centric 
Storage Management modules; Is- 
landia, N.Y.-based Computer Associ- 
ates International Inc.’s SAN Integrat- 
ed Technology Initiative framework, 
which includes its ArcServelIT soft- 
ware; and Austin, Texas-based IBM 
subsidiary Tivoli Systems Inc.’s Tivoli 
Storage Manager (TSM). 


Planning for Growth 


First Union Corp., the nation’s sixth- 
largest bank, took a different approach 
to solving its storage management 
problems but faces similar issues. The 
Charlotte, N.C.-based firm saw its stor- 
age needs skyrocket because of in- 
creased internal use of data warehous- 
ing tools and a move into e-commerce 
that added nearly 400 servers. First 
Union now stores 120TB of data in its 
Charlotte and Jacksonville, Fla., data 
centers, and a planned custom-built 
check-imaging system will add to the 
total later this year. 

“It’s been at least a [200%] growth, 


from a storage perspective, every year,” 


says Gary Fox, First Union’s vice presi- 
dent of IT. 

First Union considered using SANs, 
which off-load storage systems to dedi- 
cated high-speed networks controlled 
by Fibre Channel switches. It instead 
went with network-attached storage, 
putting cross-platform storage devices 
directly on the company’s production 
network. 

Fox maintains approximately 1,000 
NT and 1,000 Unix servers attached to 
67 storage systems supplied by Hop- 
kinton, Mass.-based EMC Corp. The 
Control Center software that comes 
with the EMC hardware is Fox’s pri- 
mary management tool, and he says 
the amount of time and effort required 
to support the Unix server storage has 


COMPUTERWORLD January 22, 2001 


Managin 
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JIM VELLELLA (left) and Joe 
Furmanski at UPMC have seen 
data center staffers spend 40% 
of their time dealing with storage 
management issues. 


Even after migrating to singles 
users Say Management across 
infrastructures remains a chall 
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decreased. But management across 
all enterprise storage systems is still 
lacking. 

“We will use this approach until we 
find a tool that will globally manage 
it,” says Fox, who is reviewing prod 
ucts from Marlboro, Mass.-based High 
Ground Systems Inc., Veritas and 
Tivoli as alternatives. 


Out With the Old 


People’s Bank in Bridgeport, Conn., 
migrated its storage to EMC drive ar- 
rays and switches and Tivoli’s TSM 
software, retiring legacy storage sys- 
tems from Milpitas, Calif.-based Stor- 
age Dimensions Inc. and Sun Micro- 
systems Inc., as well as mainframe 
storage from IBM and Blue Bell, Pa.- 
based Unisys Corp. 

“Primarily, we did it for the flexibili- 
ty — the ability to expand capacity 
quickly,” says Lena Zoghbi, the bank’s 
vice president of enterprise systems 
management. 

Raju Palnitkar, vice president of en- 
terprise server systems, says he saw 
the move to one homogeneous system 
as the best choice to get a handle on 
storage management. “We did not have 
to have IBM tools and Unisys tools and 
Sun tools to manage each of the differ- 
ent storage types,” he says. 

Most of the bank’s approximately 
500 servers run NT and Solaris, with a 
few IBM AIX and OS/2 servers and 
AT&T Corp. Unix-based servers. Each 
night, Zoghbi backs up 600GB of data 
on the servers and a mainframe to 
EMC Symmetrix 3430, 3830 and 5500 
RAID arrays. 

Six EMC Connectrix switches pro- 
vide the interoperability among the 
bank’s servers, according to Palnitkar. 
In addition to the TSM software’s back- 
up and monitoring features, EMC’s 
PowerPath load-balancing/fail-over 
software and Symmetrix Manager 
monitoring software serve as the bank’s 
primary management tools. Several 
people spend the equivalent of two 
full-time jobs managing storage. 

“T think the combination of these 
[storage management tools] is suffi- 
cient for what we need,” Palnitkar says. 
“But the EMC tools don’t give us all of 
the flexibility we need. We still need 
to get EMC involved in some of the 
changes.” 


Consolidate and Conquer 

A desire to consolidate disparate 
storage and server systems — some in- 
herited in acquisitions — while imple- 
menting disaster recovery plans was 
the main reason behind a storage ini- 
tiative at Louisville, Ky.-based Vencor 
Inc., a provider of long-term health 
care services. 

“We've been in the process of trying 
to standardize,” says Charles Wardrip, 
Vencor’s director of IS operations and 
telecommunications. The company 


built what Wardrip describes as a 
mainframelike storage model. 

“Everything that used to be distrib 
uted was now brought into the data 
center,” including 28TB of data on 700 
NT and Unix servers, Wardrip says 
“We were concerned about interoper 
ability. We felt like if we went with a 
single vendor, then they had some re 
sponsibility for what they sold. Our 
goal was really to have a single vendor 
who has some skin in the game.” 

Seven people manage Vencor’s SAN, 
which is built around EMC Symmetrix 
disk arrays and Connectrix Fibre 
Channel switches. The new system re- 
places much of the legacy equipment, 
including older Fibre Channel switch- 
es, Compaq SCSI-attached storage sys- 
tems and IBM Serial Storage Architec- 
ture systems. 

Tivoli’s TSM is the primary manage- 
ment tool — the cornerstone of the 
new backup and recovery system. But 
Wardrip says he sees a need for broad- 
er control. 

“Utilization and long-range capacity 
planning are big issues for us,” War- 
drip says, adding that he’s considering 
software from both Tivoli and Veritas. 
He says he would also like to have bet- 
ter control of the SAN’s Fibre Channel 
network itself, rather than rely on 
EMC guidelines, but he hasn’t found 
software that will do this effectively. 


Generation Gap 

Manageability may eventually im- 
prove if the next generation of servers 
and storage devices are better able to 
work together. 

That’s the goal of ongoing industry 
standardization efforts. For example, 
the Mountain View, Calif.-based Stor- 
age Networking Industry Association 
(SNIA) has a working committee that’s 
hammering out a Common Informa- 
tion Model that will let storage devices 
report themselves to software in a 
standardized way. Meanwhile, storage 
system vendors continue to push their 
own de facto standards. 

On a positive note, hardware com- 
patibility took a big leap last year with 
the arrival of SAN switch interoper- 
ability, says Dave Anderson, director of 
strategic management at Seagate Tech- 
nology Inc. in Shakopee, Minn. Ander- 
son chairs an SNIA working group fo- 
cused on object-based storage devices, 
an emerging technology that could en- 
able storage to manage itself. 

Users primarily want to bring some 
sanity to their increasingly complex 
storage systems, says John Webster, an 
analyst at Nashua, N.H.-based Illumi- 
nata Inc. “Unfortunately, I don’t think 
they’re going to get it right now,” he 
says. “There are so many approaches 
in the market.” D 





Essex is a freelance writer in 
Antrim, N.H. 








TECHNOLOGY 


HOT TRENDS & TECHNOLOGIES IN BRIEF 


Compilers, Interpreters 
and Bytecode 


DEI 


INT TION 


Compilers are programs that translate raw source code, 
which is usually written in a higher-level program- 
ming language, into a machine language program 
that’s directly understandable for computers. The 
translation, called an executable program, can be 
installed and run on a target computer without addi- 
tional translation software. Interpreters perform a simi- 
lar function, but they do it one line at a time at run- 
time. Bytecode is an intermediate approach, whereby a 
program is translated into an intermediate binary form 
that’s interpreted by a “virtual machine” at runtime. 


BY ALAN JOCH 
OMPILERS are a bit 
like Florida elec- 
tion officials: 
They're suddenly 
in the spotlight af- 

ter years of relative anonymity. 


The reason for the attention | 


is the arrival of fast and com- 
plex 64-bit microprocessors, 
typified by Intel Corp.'s Itani- 
um line. All of the sophisticat- 
ed architectural innovations 
like parallelization and branch 
prediction, as well as the 
promises of significant per- 
formance gains, will mean lit- 
tle unless programmers can ac- 
tually use these enhanced ca- 
pabilities. 

Writing code specifically for 
efficient parallel processing 


makes the difficult task of mod- | 
ern programming even more | 


challenging. As a result, re- 
sponsibility for achieving many 


of the performance claims of 


future 64-bit processors will fall 


Calif.-based Silicon Graphics | 
Inc. announced that its opti- | 


mizing compilers delivered 


30% to 100% better perfor- | 


mance than existing compilers 
when teamed with 
processors running Linux. 

Like their ancestors, opti- 
mizing compilers turn high- 
level programs into machine 
code. However, their extra con- 
tribution is making sure the 
translations handle memory — 
particularly processor-level 
caches and parallelization — 
as effectively as possible. 


For example, Itanium pro- | 
cessors are designed to simul- | 


taneously handle as many as 
six instructions per clock cy- 
cle. But to achieve this, a com- 
piler must keep a steady stream 
of data flowing through the in- 
struction pipeline. 


One technique is to corral | 


frequently used instructions 
into tight groups that the CPU 
can break into instruction 


Itanium | 


ed technique, has the optimiz- 
ing compiler load instructions 


early, in an attempt to improve | 
the CPU’s performance. Some | 
research labs, including the | 
University of Illinois at Ur- | 
bana-Champaign, have devel- | 
examples of | 


oped working 
next-generation compilers. 


| Other Options 


Interpreters also 


into machine 


code must also run the inter- 


preter in order to understand | 


| third 
| With bytecode, 
| program is translated into an 
| intermediate form that can run 
| on various hardware platforms. 
| Java bytecode is morphed into 
program. Speculation, a relat- | 


translate | 
high-level programming code | 
language, but | 
| they do it line by line as the ap- | 
plication runs. The computer | 
that’s running the high-level 


| the program. Interpreters are 
testing newly | 
written or modified code or | 
| teaching programming. Basic | 
| started as an interpreted teach- | 
| ing language. 


valuable for 


Software _ that’s 
ahead of time runs faster than 
interpreted programs. Thus, 


| compiled programs are pre- 
| ferred for large, enterprisewide 
| applications, but they aren't | 


as good for Internet Age ap- 
plets destined to run on an un- 
known target machine. 

The Java platform uses a 
alternative, bytecode. 


machine-specific code through 
a real-time interpreter called 
the Java Virtual Machine 


(JVM). This JVM builds a dedi- | 


cated memory space that hous- 
es applets and keeps them sep- 
arate from the host system’s 
storage. 


Rather than letting the JVM 
run bytecode, a JIT compiler 
translates code into the host 
machine’s native language. 
Thus, applications gain the 
performance enhancement of 
compiled code while maintain- 
ing Java’s portability. 

HP is taking a similar tack 


compiled | 


a high-level | 


| for Web 
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with its TurboChai compiler, a 
Java compiler for embedded 
applications. TurboChai aims 
to boost performance by trans- 
lating the most frequently used 
code within a given embedded 
application. Through selective 
compiling, HP plans to control 
memory usage while achieving 
speeds comparable to those of 


| JIT compilers. The TurboChai 


compiler takes Java bytecode 
as input, generates ANSI C 
source code and then uses any 
C compiler to generate opti- 
mized native code. 

Last summer, Microsoft an- 
nounced C#, an object-oriented 
programming language that 
embraces XML. Microsoft por- 
trays the new language as a 
logical evolution of C and C++ 
applications. Key 
modules will be the Common 
Language Runtime for C# and 
a special compiler that will 
turn traditional Cobol, Perl, 
Fortran or other code into an 
intermediate language that 


would then operate on Micro- 
Just-in-time (JIT) compilers 
promise to improve the perfor- | 
| mance of Java applications. 


soft’s new .Net platform. 

End users are unlikely to be- 
come compiler junkies. Never- 
theless, it may take a new gen- 
eration of compilers to deliver 
the performance gains neces- 
sary to convince professionals 
that they need to embrace 64- 
bit hardware architectures. D 





Joch is a freelance writer in 
Francestown, N.H. 





Optimizing compilers 


~ Developments in Development Tools 


DEVELOPMENT TOOLS |W 


Achieve high CPU processing 


performance via parallelization, 


Gl ‘Li 


Help 64-bit processors realize 
their potential 


sya 


on the shoulders of their next- branch prediction, speculation 
generation compilers. 

These performance-savvy 
compilers are already arriving 
from the research and develop- | 
ment labs of Hewlett-Packard | 
Co., Intel, MetaWare Inc., Mi- | 
crosoft Corp. and others. Last | 
February, Mountain 


strings and process simultane- | 
ously. Optimizing compilers | 
also maximize cycle times | 
through branch prediction, | 
where the compiler attempts 
to predict the results of GOTO | 
instructions, thus saving the | 
CPU from having to locate out- 
comes dispersed throughout a 


Just-in-time compilers Compile real-time code on client 


machines 


Improve performance of inter- 
preted languages like Java 


Selective compilers Compile only the most frequently 
used code within embedded 


applications 


Improve performance without 
draining precious memory 
resources 





View, | 
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tumultuous impact of this market shift. 
IDC has the research and expertise to help 
companies face this challenge. For more 
than 35 years, we've been helping technol- 
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¢ Hardware: Get Ready for the Appliance-Centric Era 
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Data Centers for eBusiness 
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TRACK 6 
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David Tapper Meredith Whalen 
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Compute Farms Bring 
Power to the PC 


Blackstone Technology Group harnesses 


PC power for compute-intensive apps | 


BY DAVID ESSEX 
HRISTA Schidzik’s 
job as manager 


of systems admin- | 
NEC | 


istration at 
Electronics Inc.’s 
chip design facility in Dussel- 


dorf, Germany, is often more 


a resource management chal- 


lenge than a technology chal- | 
lenge. Engineers who design | 
CPUs and application-specific | 
integrated circuits must lay out | 
their complex designs and sim- | 


ulate the chips’ program code 


— compute-intensive tasks that | 
create fluctuating demands for | 


mainframe-class power. 


“Before, we had big servers | 
for every department, and nor- | 
mally, it was never enough,” | 


Schidzik recalls. Then she 


heard about compute 


intensive applications. 


After trying to configure a | 
farm on its own, NEC called | 
Blackstone Technology Group | 
(BTG) in Worcester, Mass. Us- | 


ing BTG’s ComputeFarm Ad- 
vantage consulting service and 
software, Schidzik says, NEC 
had 50 users accessing a farm 
within a week. 

Server utilization has since 


doubled to about 25%, she says. | 


The need for new hardware 
has been mitigated, and spikes 
in demand are more easily ac- 


commodated. “I’m quite sure | 
survived | 


Schidzik | 


have 
farm,” 


couldn't 
without the 
concludes. 


we 


Betting the Farm 


BTG started in 1996 as a val- 


ue-added reseller of electronic | 
design automation (EDA) tools | 
before relaunching with its | 


compute-farm services in 1999, 
“We started to see a bigger 


and bigger opportunity” in of- | 
fering compute farms to custo- | 


mers, says Kanti Purohit, BTG’s 
chief operating officer. Since 
then, the company has signed 
on biotech heavyweights such 


as Biogen Inc. in Cambridge, | 


Mass., 
Group in Rockville, Md. 


BTG’s offerings range from | 


construction of compute farms 


from the ground up to recon- | 
figuration and management. It | 


also offers software that lets 
companies function as applica- 
tion service providers to sell 


and Celera Genomics | 
| tal” node, last month. It will | 


compute power Over intranets 


| or the Internet. 


Biogen threw the switch on 
its farm, built on 200 Intel- 


based Linux servers 


and a 


Sun Microsystems Inc. “por- | 


use the new capacity mostly | 
for data analysis to look for | 


pharmaceutical “targets” in the 
human genome. 


Biogen selected Compute- | 


Farm Advantage over more 


generic offerings from Com- | 
| and Sun, with whom it also has 





farms: | 
servers pooled to create a sin- | 
gle computing resource opti- | 
mized for CPU and memory- | 


COO KANTI PUROHIT (left) and CEO Ron Ranauro want to 
expand the use of compute farms in business. 


Blackstone 


PUTE 
<o™ Ry 


Technology Group 


Location: 100 Grove St., Worces- 
ter, Mass. 01605 


Niche: Compute farm software 
and services 


Why it’s worth watching: 
Technology provides cost-effective 
access to processing power for 
compute-iniensive applications. 





Company officers: 

¢ Ron Ranauro, CEO and founder 
* Rebecca Hyman, vice president 
of technology 

¢ Kanti Purohit, chief operating 
officer 


rate last year 


Burn money: $3 
million from Molehill 
Ventures, $15 million 
round under way 


Products/pricing: Compute- 
Farm Advantage consulting 
services and 90 days’ use of 
software, $25,000 to $250,000; 
software subscription, $12,000 
to $80,000 per year thereafter, 
depending on CPU count: 
PowerCloud software for ASPs, 
$250,000 





Customers: 3Com Corp., Biogen 
Inc., EMC Corp., Vertex Pharma- 
ceuticals Inc. and others 





Milestones: 

¢ 1996: Company founded 

¢ 1999: Relaunched as a compute 
farm provider 

¢ September 1999: ComputeFarm 
Advantage debuted 


Employees: 57: 400% growth 








Partners: Compaq, Sun, Veritas 
Software Corp. and others 


Red flags for IT: 

© Compute farm hardware vendors 
may beef up consulting efforts. 
Customer experience limited to 
a few vertical markets. 
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Corp. and 
Calif.-based 


paq Computer 


Mountain View, 


Silicon Graphics Inc., accord- 
ing to Rainer Fuchs, director of | 


research informatics. 

CEO Ron Ranauro says BTG 
wants to expand into other 
compute-intensive markets, 
starting with financial risk 


modeling, digital content cre- | 


ation, oil and gas exploration 
and mechanical design auto- 
mation. But BTG’s industry- 
specific knowledge is a major 


selling point, so the company | 


might lose focus, warns Diane 


Myers, an analyst at San Jose- | 


based Stratecast Partners. 

BTG competes with main- 
frame and supercomputer ven- 
dors, as well as other compute- 


farm vendors such as Compaq | 


| partnerships. These and other 


firms, such as Microsoft Corp., | 


| also offer related clustering 


technology 


for 


| computing resources. One — 


| Utah — 
ters for some of the same verti- | 


Linux Networx Inc. in Sandy, 
assembles Linux clus- 


cals as BTG, including EDA, 


| bioinformatics and oil and gas. 


Purohit says the early going 
was tough because few people 
understood the compute-farm 


| concept. Making money on 
| load sharing — essentially a 


| commodity — 


was another 
problem, as was “coming up 


' with a business model that is 


| powerful emerging player ina | 


going to be sustainable in an 
environment where the 
major platform ven- 
dors are going to bea 

player,” Ranauro says. 
BTG’s expertise and 


'S technology have won 


the respect of customers 
and partners. “They are a 


| space that I don’t think has got- 
| ten a lot of attention and likely 

will going forward,” says Jilani 
| Zeribi, an analyst at Current 
| Analysis Inc. in Sterling, Va. 
| “Blackstone’s competitors, in 


my opinion, are people doing 


| it on their own. Blackstone’s 





argument — and I think it’s 
really compelling — is that’s a 
lot of money to throw at a 
problem that you’re not deal- 


| ing with all the time. They’ve 


made a compelling business 
case. Throwing compute pow- 
er at something is only going to 
get more and more common, 
and harder for companies to 
do.” D 





Essex is a freelance writer in 
Antrim, N.H. 


aggregating | 


the buzz 


STATE OF 
THE MARKET 


| Compute Farms 
vs. Server Farms 


Compute farms approach the comput- 
ing power of mainframes by aggregating 
servers into one large, virtual resource 
| that's accessible by workstations and 
optimized to run large jobs that may take 
minutes or hours. They differ from server 
farms, which process large numbers of 
short bursts of transactions. 

BTG claims that its expertise is in 
| knowing howto configure a company's 
| networked PCs and outfit them with 
special management, scheduling and 
performance-monitoring software. Its 
| staffhas expertise in compute-intensive 
| scientific specialties like bioinformatics. 
BTG says compute farms cost a frac- 
| tion of what centralized Big Iron systems 
cost because they harness the comput- 
| ing resources of cheaper hardware. 

Decentralization across networked PCs 
| produces additional benefits such as 
improved scalability (since capacity can 
grow insmaller increments than with 
mainframes) and reliability (because 
power failures and other hardware 
glitches won't bring down the whole 
system). Compute farms also let users 
retain the convenience and power of 
their desktop workstations rather than 
forcing them to access a mainframe 


Carrying the Load 

The key piece of software in BTG’s Com- 
puteFarm Advantage isn’t made by BTG. 
San Jose-based Platform Computing 
Corp.'s LSF Suite is the scheduler and 
load balancer, scheduling jobs at opti- 

| maltimes and shuttling them to the Unix 
and Windows NT systems with the most 
capacity. 

BTG also offers Sun Microsystems 
Inc.'s Grid Engine load-sharing soft- 
ware. BIG’s own SmartCache software 
and an extension, SmartBlast, distribute 
data across the compute farm, avoiding 
the bottlenecks that come from squeez- 
ing huge databases across low-band- 
width networks. A third BTG tool, Smart- 
Watch, lets administrators monitor and 
optimize performance and bill for use of 
the farm 

BTG's security and privacy technol- 
ogy is anecessary component in mak- 
ing each user's system available to 
others, the company claims. “These 
resources might be on different work- 
stations in different locations,” says 
Chief Operating Officer Kanti Purohit. 
“You need a different concept of secu- 
rity.” Finding industry-standard encryp- 
tion tools inadequate, BTG invented 
what Purohit informally calls a “dynamic 
firewall” that runs on each system. 

- David Essex 
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AST JULY, GoTo Auc- 

tions was knee-deep 

in problems. Part of 

Pasadena, Calif.- 

based GoTo.com 
Inc.’s portal site, Raleigh, N.C.- 
based GoTo 
“shopbot” for auction sites, al- 
lowing users to search hun- 
dreds of different auctions for 
specific items. 

GoTo Auctions’ flagship ap- | 
plication, AuctionManager, 
had gotten unwieldy. Although 
it was a powerful program, 
with terrific functionality, cus- 
tomers weren't using it. 

Fortunately, the talent need- 
ed to solve the problem was al- 
ready in-house, in the form of 
Amber Link, a relatively new 
employee. 

Link had come on board in 
March, when GoTo acquired 
start-up AuctionRover.com. As 
AuctionRover’s content direc- 
tor, she had produced its week- 
ly online magazine. 

At GoTo, she knew she 
would need a new role. “Con- 
tent wasn’t really part of their 
business model,” she says. 

What GoTo Auctions need- 
ed, Link realized, was an infor- 
mation architect. 

Information architects de- 
sign the user’s experience as 
he travels through a Web site. 
During the first few months af- 
ter she joined GoTo Auctions, 
Link had been increasingly in- 
volved with information de- 
sign and user-interface ques- 
tions. With this user-centric 
approach, Link knew she could 
find out why users didn’t like 
AuctionManager and deter- 
mine what could be done to 
improve it. 


Auctions is a 


| 
Creating a New Job 

At her request, she became 
GoTo Auction’s first informa- 
tion architect. Her first, trial- 
run assignment: Fix Auction- 
Manager’s problems. 

“The information architect 
is responsible for how infor- 
mation is distributed,” notes | 
Robert Egert, chief creative of- | 
ficer at Internet consultancy 
Xpedior Inc. in Chicago. “The 
goal is to identify the ideal user 
experience and specify what it 
will take to create that.” 

Information architecture is a 
new profession that’s gaining 
recognition. Like GoTo Auc- 
tions, many companies create 
the title only after someone on 
staff discovers that an informa- 
tion architect is needed. Oth- 
ers know that’s what they need 








TECHNOLOGY.) 


The Web‘ 


‘Master Builders 


Charged with guiding a user’s experience 
throughout a Web site, information architects are 
playing the critical role of turning functional Web 

sites into truly useful ones. By Minda Zetlin 


and specifically recruit for that | 


position. Complex  e-com- 


| 


merce sites with many differ- | 
ent products are especially 


likely to recognize the value of 


information architecture. 

Salaries for information ar- 
chitects range from approxi- 
mately $50,000 to $120,000, de- 
pending on experience and the 
location of the employer. 

A related position called 
user interface designer or user 
interaction designer performs 
a similar function but at a less 
strategic level. 


“Information architecture 


tends to be concerned with the | 


whole, the structure of a site. 
Interaction design is more at 
the page level,” says Peter Mer- 
holz, a user experience consul- 
tant in San Francisco. “It’s like 
the difference between the 
person who designed the su- 








dust the Facts 


Name: Amber Link 

Age: 23 

Title: Information architect 
Employer: GoTo Auctions 
(part of GoTo.com Inc.) 
Reports to: Director of prod- 
uct management 


permarket and the person who | 
designed the checkout line bar 


code reader.” 

There is no formal training 
for information architects yet. 
And the people who fill this 
position come from various 
backgrounds: human factors, 
library science, graphic design, 
filmmaking and, sometimes, 
actual structural architecture. 
Some, including Link, come 
from editorial backgrounds. 





i 


not enough information archi- 
tects take the trouble to do. “A 
lot of people act as proxies for 
the user,” she explains. “They 
say, ‘I read their e-mail.’” But 
that tells only half the story, 
she says: “By reading their 
e-mail, you'll find out what 
you’re doing wrong but not 
what they really want.” 

As a result of her talks with 
users, she says, “We did a com- 
plete redesign. We wound up 
building a scalable application 
that really works.” And the 
project was deemed a success 
when seller postings via Auc- 
tionManager increased 30%. 


| Validating the Need 





Now, Link says information 
architecture is part of GoTo 
Auctions’ development cycle 
“Product management finds a 
need for a new product. With 
the help of our customer sup- 
port staff, I validate that need. 
We talk to people and ask if 
they even want this feature — 
it could be really cool but does- 
n’t meet their needs.” 

Her next step: “I draw out 
the basic idea of how a user 
would progress using this fea- 
ture and do an interface de- 
sign. Then we prototype those 
designs and ultimately test 
them with users,” she says. 

She says her role is to be a 


| “starting gate” for product de- 


Link says an editorial design 
job is the perfect training 
ground for an information ar- 
chitect’s role. 

When designing a newspa- 
per page, she points out, you 
put the most important story at 
the top. Then you think about 
where you want the reader’s 
eye to travel next and lay the 
page out accordingly. 

“When I first got interested 
in information architecture, I 
knew these concepts existed in 
the world of print publishing,” 
Link says. “I wondered if the 
same sort of research was be- 
ing done for the Internet.” In- 
formation architecture turned 
out to be the answer. “There’s a | 
lot of affinity between the two | 
fields,” she says. 

Link began her work on Auc- 
tionManager by talking to the | 
site’s users, something she says ! 


velopment. “Any idea 
through me, so I can make sure 
we build a great product. I also 
make sure things don’t get out 
of control, and that we don’t 
overload the user with infor- 


goes 


mation.” 

Egert says the growth of the 
information architect profes- 
sion signals a new way of look- 
ing at software. 

“In the old days, engineers 
designing pages would decide 
what they were going to be,” 
says Egert. “They worked, and 
you could move through them, 
but they looked terrible. Then 
they’d get a [graphical user in- 
terface] designer. That would 
be like someone painting the 
side of a van to pretty it up. It’s 
an inferior way of working. 

“Software is an engineering 
thing. But users don’t experi- 
ence the software, they experi- 
ence the user interface,” Egert 
adds. “And in this new way of 
working, the experience is as 
important as the technology,” 
he says. D 





Zetlin is a freelance writer in 
Woodstock, N.Y. 
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COMPUTER 
** CALIFORNIA ** 


Web Architects/ 
Programmers/Analysts 
(Java/Serviets/EJB-C++/ 
CORBA/UNIX) 

Outsourcing Architects & 
Delivery Mgrs. 
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Datamatics 


MS/BS or equivalent & relevant work experience 
or at least 2 years experience in some of the 
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HTML old Fusion, ASF 
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MEG/PRO 
SR. SYSTEMS 

ANALYST 
Assembleon America, a 
member of the Philips 
group of Someninas is 
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ed self-starter t 0 join its 
dynamic IT team of pro- 
fessionals 
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Ferry Rd., Alpharetta, GA 
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FAX 770-751-4578 

www.assembleon.com 
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NT, Windows 95, Windows 98 
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ASP, COM/DCOM, Active X 
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Nexgenix, a leading supplier of 
innovative, end-to-end e-Busi 
ness consulting services, is 
seeking technical architects 
developers, designers, analysts 
project managers and strate 
gists. Qulaified candidates must 
possess a minimum of a Bache: 
lor's or Master's degree and/or 
comparable experience. Oppor 
tunities are available at all of our 
locations, including California 
Georgia, New York, New Jersey, 
North Carolina and Florida. For 
information please visit our 
website at www.nexgenix.com or 
send resume to 

careers @nexgenix.com 
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TECHNICAL 

RECRUITING 
& RETENTION 
CONFERENCE 


COMPUTERWORLD 


- | 
4 aie 
Juh@3*6,'2001.*~ 


Marriott's Desert.Springs- 
Resort & Spar @ 


Palm Desert, California 


~ . 

Want to learn the 
ato) ac--1 am c-leialal(el6(- 
Tal (rel glal(er-]inac-vogeli diate} 
& Retention today? 
Connect with experts 
and peers in Palm 
Desert, California, at 
the tenth annual 
Technical Recruiting & 
Retention Conference, 
June 3-6, 2001 at 
Marriott’s Desert 


Springs Resort & Spa. 





serve Your Place! 


SESSION HIGHLIGHTS INCLUDE 


Xtreme Recruiting: 
How We Got Here and Where 


We Go from Here 
MICHAEL MCNEIL, PURE CARBON 


Critical recruiting lessons for a critical time in recruiting. Michael 
McNeil, the former head of Cisco staffing and founder of Pure 
Carbon, a unique e-recruitment solutions company, is considered 
by many as one of the leading visionaries in the employment space 


Automated Screening: 
Guaranteed Success or Formula 


for Failure? 
DR. WENDALL WILLIAMS, SCIENTIFIC SELECTION 


Are you really measuring what you want? What does it take to do 
it right? Dr. Wendell Williams, Managing Director of Scientific 
Selection is a nationally recognized expert in testing and assess- 
ment for selection. He is a frequent contributor to online and print 
recruitment newsletters and professional publications. 


Measuring Your Success: 
What Your Management Really 


Wants to Know 
KEVIN WHEELER, GLOBAL LEARNING RESOURCES, INC. 


The critical value of metrics is in the eye of the beholder. Do you 
know who your stakeholders are? 

Kevin Wheeler, the President and Founder of Global Learning 
Resources, Inc., is a globally-known speaker, author, columnist, 
and consultant in human capital acquisition and development 


Managing the Hiring Manager 
KEN GAFFEY, STAFFING CONSULTANT 





What you can do to plan, prepare and promote critical relation- 
ships in the hiring process. 

Ken Gaffey is a staffing consultant with over 15 years of Human 
Resources experience in the New England high technology and 
financial services marketplace. Ken is an active member of 
IHRCA, NEHRA, SHRM, HRC, the Society of Professional 
Consultants, and the Human Resources Council. Ken contributes 
articles and book reviews to the Electronic Recruiting Exchange, 
Monster, HR Today, and several other professional organization 
newsletters and periodicals 


Building World Class College Relations 


Programs 
JULIE CUNNINGHAM, TELLABS, INC. 





If your competitors succeed in hiring 23% more college students 
this year, will there be any left for you? 


Julie Cunningham, Manager, Global College Relations, Tellabs, 
Inc. Julie is a former board member of the National Association of 
Colleges and Employers. She speaks frequently on the programs 
and practices that have made Tellabs one of the premier bench- 
marks for college hiring. 


Diversity - What You Need to Do to Tap 
“All” the Top Talent 
PRESTON EDWARDS, IMDIVERSITY.COM 


Top employers benchmark how diversity has become a core 
to attracting and retaining top talent and keeping a com 
edge. Moderator, Preston Edwards, Chairman and CEO, 
IMDiversity.com, and Black Collegian Magazine, is nationally 
known for his 30 year commitment to diversity education. He has 
been honored by numerous organizations including the 1999 
Pericles Award from the Employment Management Association 


What You Really Need to Know About 
Resume Management Systems or, How to 
Tell “Real Ware” from “Vaporware” 

MARK MEHLER, MMC GROUP 


The worlds most competitive corporations discuss the pros and cons 

of choosing and using emerging technology tools and systems 
Moderator: Mark Mehler, President, MMC Group. Mark is an internation- 
al consultant on high-volume staffing processes, a sought after speaker 
at national recruiting Cc conferences and co-author of CareerXroads 


Town Hall Forum: 


Pundits, Puns and Pulled Punches 

GERRY CRISPIN, CAREERXROADS 2000; JOHN SULLIVAN, 
AGILENT TECHNOLOGIES; KEVIN WHEELER, GLOBAL 
LEARNING RESOURCES; PETER WEDDLE, WEDDLE’S 


Four internet recruiting pundits square off in a “no-holds” barred 
debate on the future of employment. Who are the winners and 
losers in the employment space? 


Internet Recruiting Strategies - 


TOOLS Overview: 
BRET HOLLANDER, NETRECRUITER 


Advanced sourcing strategies & techniques demonstrated from an 
actual day of recruiting by one of the best firms in the U.S. on sourc- 
ing any type of candidate. Witness actual software, as well as unique 
scripts and techniques to successfully develop relationships with 
potential candidates. TOOLS is intended for recruiters or sourcing 
specialists who have already mastered basic sourcing techniques 
through the use of fee-based sites, formula searching on engines 
such as AltaVista or Google, and have taken an existing all-day class 
on this topic by any of the top Internet recruiting training firms 

© Capture Tools 

© Processing Tools 

¢ Communication Tools 

© Security Tools 

¢ Learning Tools 


Technology 2001 
SUSAN HODGES, SEMCO 


There is always something new going on in IT, but the new millen- 
nium seems even busier than usual. The internet is affecting every- 
thing that’s being done and new products and skills appear daily. 
This session will look at the new technology in each critical area - 
platforms, development, data, communications and applications. 
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Watching the results of holiday e-tail giants is only 
part of the e-business story. Companies throughout 


the world are using e-business technologies to revamp 


their businesses, reducing borders and obstacles. In 
some instances, the web-enabled technologies are 
allowing regional businesses to flourish, while larger 
and more global firms are flocking to exchange 
operations that streamline the supply chain. 


The net result for IT professionals is continued 
growth for those who understand effective business 
operations and how technology can resolve many of 
the fast-paced challenges. 


Accenture 

Chicago, IL 
The name may be new, but Accenture has a long-standing repu- 
tation as one of the world’s largest management and technolo- 


gy consulting organizations. Formerly Andersen Consulting, the 


group has five areas of operation - consulting, technology, 
outsourcing, alliances and venture capital services. 


Bill Ziegler, global director of recruiting, says what this really 
meanis is that “Accenture is aspiring to be the market-maker, 


architect and builder of the new economy, bringing innovations 


to improve the way the world works and lives. For employees, 
that represents the best of both worlds. They can roll up their 


sleeves and do the kind of professional services work they want, 


while at the same time have the career development, training 
and security a top firm that already enjoys an outstanding 
market reputation can offer.” 


Among the top attractions as an employer is that Accenture 
offers employees multiple experiences to apply their 
know-how with the world’s top companies. “We need to hire 
approximately 20,000 people for our global organization,” 
Ziegler says. Ziegler plans for approximately 40 percent of the 
hiring to be people with experience, the remainder at entry 
level. “What we look for in the people is a keen interest in 
what we do and who have the aptitude or experience to 
succeed. We define aptitude as a well-rounded person who 
has demonstrated strong communication skills, leadership 
and who has completed an internship or work program. Our 
interview process is designed to draw out whether the person 
is a life-long learner, committed to developing a career 

and who understands what we do. While e-commerce and 
e-business skills are important and we do hire computer 


science and engineering degrees, about 17 percent of our 


entry-level hires are liberal arts graduates.” 


Accenture invested $650 million in employee training last year. 
“To keep Accenture ahead of the curve, we make investments in 
our people that allow us to create a client service capability that 
is at the market-maker level,” Ziegler explains. 


“The top three reasons you would join Accenture are clear,” 
Ziegler says. “The first is that we offer a variety of opportunities 
with stability - a chance to work across a network of businesses. 
Second, this is a great place to work in terms of the programs 
we've been rolling out dedicated to our employees - continuous 
learning, leadership and flexible work arrangements. I only see 
this increasing in the future. Third, the competitive rewards, 

not just in the sense of money but also your personal and 


professional growth, are a priority for Accenture.” 


Ajilon LLC 
Harrisburg, PA 


Steve Dailey, vice president of Ajilon’s Enterprise Solution 
Development National Practice, believes that agility is a base 
requirement for businesses today, just as it is for the consul- 
tants who work at Ajilon. “To support our customers, we need 
folks who take hold of new technologies and business processes 
to build solutions,” says Dailey. “The assumption when we hire 
experienced and energetic professionals is that they are strong 
with industry-specific business models and can integrate them 


into technology solutions.” 


Dailey’s organization supports pure web-based development 
that ranges from traditional e-business applications to 

supply chain integration and system transformation. “Our 
customers expect a combined effort, and we provide them with 
small, multi-disciplined teams of IT consultants. One of our 
strengths, that we've built over the past 34 years, is our ability 
to recruit the top IT talent around the world. This superior 
recruiting allows us to have a strong pipeline of experienced 


professionals worldwide. 


“Another core competency for Ajilon is that we have 
performed numerous highly integrated projects over the 
past three decades. We're familiar with our clients’ systems 
architecture and their business models,” Dailey adds. 


While Ajilon seeks professionals who are experienced, with 
business analysis skills, as well as technical skills in web 
development, architecture and systems development, and 
implementation, the company also focuses on skills that will 


be needed for the future. “Our internal tracking systems allow 
us to identify these skills. We have staff development boot 
camps that allow the staff to create and acquire new skills,” 
Dailey explains. “We then share that new knowledge with our 


customers and their organizations.” 


Ajilon is involved with projects ranging from heavy, high-end 
initiatives through basic maintenance. “At base, we rely on a 
very entrepreneurial environment. Your creative talent is what 
helps us to continuously evaluate the business and market- 
place. We try to connect the dots between your own drive and 
the marketplace. We're known for motivating, maintaining and 
retaining the high talent needed for our diverse projects.” 


Amazon 
Seattle, WA 


Coming off the holiday season, Amazon.com had good 

news - the online retailer sold more than 31 million items with 
99 percent of the shipments arriving in time for the holidays. 
With a 29-million customer base, Amazon.com already is 
looking for new IT developments to maintain performance 


through the 2001 season. 


Robert Stohr, technical recruiting manager for Amazon.com 
says the result is that the company continues hiring. “We never 
stop our search for the best talent,” he says. The exact skills 
required shift constantly as the five-year-old mammoth contin- 
ues to redefine the way online retail business is conducted. 
“Our biggest challenges continue to be scale and integration of 
merchandising, operations, distribution, and our retail stores,” 
says Stohr. Amazon.com refers to its online links and offerings 
as stores, offering customers everything from the base of books 
to patio furniture, cookware, wireless phones, consumer 


electronics and more. 


In 2000 the company’s IT experts made it possible for every 
customer to have his or her own storefront, routing data and 
information to the customer based on browsing patterns, 

last item purchased or past buying trends. “The customer 
self-service tools that made this happen reflect tremendous IT 
challenges and a lot of hard work,” Stohr explains. “We keep 
building on the experience, allowing customers to track the 
order through shipment and delivery. Our goal is to make the 
online experience more and more personal, better than what 
you would get at a traditional store. Our ultimate win is the 


best possible shopping experience for the customer.” 


Stohr says there is a need for talented software development 
engineers. “We want people with technical skills but also who 
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have experience working with scalability issues. We also want 
people who have the core competencies that define what 
Amazon is,” says Stohr. “These include being biased for 
action, individuals who are innovative in their thinking and 


who can figure out how to get things done.” 


Stohr believes the Amazon.com challenge is unparalleled. 
“What you are doing will be completely new. We are entrepre- 
neurs working together. That means we operate in a highly 
individual environment that fosters creativity but that relies 
on teams to accomplish things,” he says. “This is a high 
performance environment that requires people to stretch and 
grow. It’s extremely individual and collaborative at the same 
time, and that combination is appealing to most people. 
Amazon.com provides its employees with a workplace that has 
some of the best and brightest in this industry, people who 
are eager to work with one another. Finally, there are myriad 
opportunities at Amazon.com. Employees are given the 
opportunity to work in different functions of the business, 
create applications that have never existed before and see 


them at work in the marketplace in just a few months.” 


Bloomberg 
New York, NY 


Most people think of news and information dissemination 
when they think of Bloomberg. However, the media giant is a 
major player in the IT world with constant challenges in 
developing proprietary information tools. “Within the IT 
world, we would be described as a service provider,” explains 
Wellington Wonsang, recruiting manager for research and 
development. “The bulk of our business comes not from 
publishing or news but from leasing and selling of licenses 


for our hardware and software.” 


The company delivers information from a variety of sectors 
from consumer goods and retail to current R&D initiatives. 
“We provide information to businesses so they can conduct 
their business more effectively and efficiently,” he says. “The 
difference is that our primary focus is not selling products 


online, we're delivering data.” 


Wonsang says the projects provide a two-fold challenge: 
dealing with highly proprietary information and creating 
technical solutions from the ground up. “We aren't working 
with the traditional object-oriented technologies,” he 
explains. “The majority of our development efforts are in 
the C/UNIX environment. This is done strategically not as 
aversion to object-oriented technologies but because C is a 
compiler language, allowing us to take raw code and develop 
unique applications, functionalities and features from the 


ground up.” 


Nonsang says the technical challenges are coupled with an 
open environment that stresses the exchange of information 
and ideas between colleaques. “Mike Bloomberg doesn’t even 
have an office,” he says of the company’s owner. “Our confer- 
ence rooms have glass walls - the overall idea is that this is an 
open environment. The contrast between this open culture and 
the highly proprietary nature of our work makes for two 


extremes that blend into one great environment.” 


While the open environment fosters learning from one 
another, the company also invests in Bloomberg University 
to provide training on technical and business skills for 
employees. The ACD Line is an automated call distribution 
system that allows employees to phone in with requests for 
specific expertise. After one year of employment, individuals 
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are encouraged to transfer to other areas of Bloomberg. 
“Because the systems are so proprietary, we look at this as a 
way to transfer knowledge, making you even more valuable as 


an employee. 


“We are looking for application development people who are 
solid code warriors, who are interested in C language and 
working in the UNIX/Solaris environment,” says Wonsang. 
“Experience with financial functions is helpful as we have 
teams supporting fixed income analysis, equity and trade 
book. This doesn’t mean we don’t recognize and hire talent 
from other industries, such as telecommunications and 
pharmaceuticals. We also have a robust college recruitment 
program in which we look for people with a good, solid 
undergraduate degree - not necessarily a technical degree 
but evidence for the capacity to learn. Even through we look 
for graduating students with a technical focus, we also look 


for students with the capacity to learn the technology.” 


The Revere Group 
Deerfield, IL 


In a world of coding, the Revere Group refers to itself as a 
“heavy-lifting integrator.” Susan Fuller, vice president of 
internal operations for the business, says the firm is known as 
a trusted advisor to middle-market businesses. “We're known 
for providing competence and results, as well as a strong 
methodology for our projects. For instance, when you go to 
retail row, you choose a store owned by someone who pays 
attention to detail and you know the quality of the product 
you get. That’s us in the e-business consulting world. We're 


built on repeat business.” 


While the Revere Group doesn’t target the Fortune 100, the 
firm has been part of some major projects. For the National 
Transportation Exchange, the Revere Group developed an 
integrated commerce exchange, like the NASDAQ, for 
sharing information between transportation supply chain 
members in rail and trucking. “We helped architect the 
consolidation of exchange applications under a single web 
umbrella,” says Fuller. The project involved a diverse team 
that provided technical and functional skills, as well as 


subject-matter expertise. 


The company provided Distribution Market Advantage, a 


national food service distribution company, with a web 


presence to support their member constituency that included 
a web-based order entry and reporting system servicing 
DMA’s members and customer commerce needs. The company 
also helped streamline the business process for PeaPod, a 
Chicago metro-area online grocer who switched from use of 
neighborhood grocers as suppliers to its own warehouse 
distribution system. “We helped consolidate and scale 

this system to meet the demand. We were involved with 
identifying and evaluating a variety of warehouse manage- 
ment systems, as well as selection and integration into an 


end-to-end collaborative commerce engine,” Fuller says. 


These types of projects are driving hiring for the coming year. 
“We don’t limit ourselves to job requisitions,” Fuller says. 
“Instead we maintain an ongoing search for individuals with 
technical skills who can meet the demand for leading-edge 
technologies, whatever those may be at the current time. We 
look for people who have technical breadth and depth in a 


variety of areas.” 


UUNET 
Ashburn, VA 


Just over a decade ago, UUNET was formed as one of the 
original Internet companies. Today the company has more 
than 70,000 business customers on five continents. Janet 
Brumfield, spokesperson for the company, says Internet 
Provider services are available in more than 100 countries. 
“We offer a range of Internet services for businesses, ranging 
from Internet access to web hosting and remote access to 


virtual private networking and security,” she says. 


Currently the company has 7,000 employees around the 
world, with major offices in Ashburn, Columbus (OH), 
Ann Arbor (MI) and London. 


“We have numerous positions open in information technolo- 
gy,” says Brumfield. UUNET is hiring product engineers, 
network engineers, web developers, network monitoring and 
support personnel, marketing/engineering support, planning 
and provisioning engineers and sales and marketing 
professionals. “We seek people with a technical background, 
particularly who have experience in the IP market.” 


Among the 2001 challenges is continued expansion of the 
UUNET global network and enhancements to the services 
offered. Site-to-site VPN solutions currently are offered 
in 23 countries, but UUNET plans to expand to new 
countries throughout the year. “We also offer challenges 
in wireless/Internet technology, voice over IP and other 
leading-edge technologies,” Brumfield says. 


“In addition to the technical challenges and worldwide nature 
of our business, UUNET has a lot to offer,” Brumfield adds. 
“All the toys are here, from our test bed and labs to the latest 
in equipment. We are traveling uncharted waters so some of 
the things that you will be doing with UUNET has never been 
done before.” 
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~ NEWS 


‘Tech Vendors, Feds Join to 
Share Security Information 


Cisco, CSC, Microsoft, HP and Oracle 
are among the founders of IT alliance 


BY DAN VERTON 
GROUP OF 19 tech- 
nology vendors 
last week took a 
long-awaited step 
aimed at improv- 
ing data security procedures 
by announcing the formation 
of an alliance aimed at sharing 
information about viruses and 
other potential threats to cor- 
porate and government com- 
puter networks. 

Plans for the IT Information 
Sharing and Analysis Center 
(IT-ISAC) were detailed at the 
U.S. Department of Commerce 
in Washington by government 
officials and representatives 
from participating vendors such 
as Cisco Systems Inc., Comput- 
er Sciences Corp. (CSC), IBM, 
Hewlett-Packard Co., Microsoft 
Corp. and Oracle Corp. 

Their goal is to set up a se- 
cure mechanism for compa- 
nies to exchange information 
about security vulnerabilities 
with one another and with 
government agencies. 

Internet Security Systems 
Inc., an Atlanta-based vendor 
of security management soft- 
ware, will operate the new vir- 


ARATE AORN T ROE TED IT CALE IRN AIEEE, 
AT A GLANCE 


I'T-ISAC 


The Team: 19 founding members from 
the hardware, software, e-commerce and 
security industries, including AT&T, Cisco, 
IBM, Intel, Microsoft and Oracle 


The Mission: Monitor and exchange 
information on potential and known threats 
and vulnerabilities to corporate and govern- 
ment computer systems 


The Reason: National cybersecurity is 

the one national security challenge that the 

federal government doesn’t have the exper- 
sources to combat on its own 


How It Will Work: Internet Security 
Systems will operate the IT-ISAC and will 
share warning and threat information with 
federal law enforcement and possibly intel- 
ligence officials, as called for 





tual data-sharing center under 
the oversight of a board of di- 
rectors drawn from many of 


| the founding companies. Other | 


companies will be able to join 
the IT-ISAC initiative for 
$5,000 per year. 

Outgoing Commerce Secre- 
tary Norman Mineta said shar- 
ing information about network 
intrusions, security vulnerabil- 
ities and measures that compa- 
nies can take to protect their 
systems is one of the best ways 
to safeguard IT infrastructures. 
It also helps businesses and the 


government respond 
rapidly to attacks, he said. 
The IT-ISAC is the fourth 
such private-sector alliance to 
be formed, joining similar ini- 
tiatives in the banking, elec- 
tricity and telecommunica- 
tions industries. The establish- 
ment of the technology indus- 
try alliance comes more than 
two years after the Clinton ad- 
ministration first urged com- 
panies to join the government 
in efforts to protect critical in- 
frastructure from both physi- 
cal attacks and cyberattacks. 
Mineta, a 
Bethesda, Md.-based Lock- 
heed Martin Corp., called the 
commitment to information 
sharing “a very courageous 


more 





former CEO of 


thing to do” on the part of the 
19 founding companies. 

“The last thing that a corpo- 
rate executive wants to do is 
share information about his 
own company with the compe- 
tition,” said Mineta, who has 
been nominated by George W. 
Bush to take over as the next 
secretary of transportation. 

In addition to legislation 
that has been introduced in 
Congress that would make 
proprietary data shared by 
companies with the govern- 
ment exempt from the Free- 
dom of Information Act, the 
national security community is 
working to develop trusted 
paths for exchanging sensitive 
and classified information. 





Continued from page 1 


China 


gaining technical information, 
the report states. 

But representatives from 
companies with major opera- 
tions in China said they have 
never had problems and don’t 
plan to run scared now. 

“I would discount most of 
the alarmist reports,” said Da- 
vid Blumental, a corporate 
lawyer at the law firm of Vin- 
son & Elkins in Houston who 
has represented numerous 
firms doing business in China. 

“The real focus of their con- 
trol efforts is what the Chinese 
call ‘black and yellow, or polit- 
ical and pornographic materi- 
al,” said Blumental. “How seri- 
ous an issue [economic espi- 
onage] is depends on who you 
are and what business you’re 
in.” And it isn’t unique to Chi- 
na, he added. 

Philip Leung, vice president 
of the American Chamber of 
Commerce in Hong Kong, also 
expressed doubts. 

“I am not convinced that the 
Chinese government is overtly 
— or, for that matter, covertly 
— engaging in corporate espi- 








onage via the Internet,” said 
Leung. 
Yet U.S. intelligence experts 


interviewed by Computerworld | 


say China’s vast intelligence- 
collecting apparatus has a vo- 
racious appetite for any U.S. 
technology that could help 
speed the People’s Republic’s 
military modernization and 
boost the country’s economy. 
That puts high-tech vendor 
companies particularly at risk. 
“Businesses operating in 
China are up against a national 
government that has essential- 
ly unlimited resources and a 
long track record of industrial 
and economic espionage,” said 
one intelligence official. 
“Every business in China is 
run by the government, and 
any effort to develop intelli- 
gence and promote those in- 
dustries is a national effort,” 
said Peter Gasper, a senior 
geopolitical analyst at Logi- 
Keep and principal author of 
the report. He added that 
scans, probes and_ attacks 
against U.S. firms in China “are 
statistically confirmed and 
growing” and could be Chi- 
nese tests of offensive informa- 
tion warfare tactics or the 
work of Chinese virus writers. 
The U.S. firms that may be at 





the greatest risk of losing pro- 
prietary data include compa- 
nies that have set up develop- 
ment laboratories in China, 
said Gasper. But those compa- 
nies, eager to gain a foothold in 
China’s burgeoning IT market, 
don’t necessarily share the 
fears of intelligence experts. 


Play by the Rules 

Rosemary Yaecker, a spokes- 
woman for Murray Hill, NJ.- 
based Lucent Technologies 
Inc., which signed a $15 million 
deal this month with China’s 
Liaoning Telecom for Lucent’s 
optical networking products, 
said there are no barriers to 
doing business in China for 
companies that know the rules 
and abide by that nation’s laws. 

Fred P. McNeese, a spokes- 
man for IBM Asia-Pacific, said 
IBM “believes appropriate 
safeguards are in place in Chi- 
na and elsewhere.” 

Patrick McGovern, chair- 
man of the board of Boston- 
based International Data 


Group, the parent company of | 


Computerworld, has played an 
instrumental role since 1980 in 
opening up China’s markets to 
U.S. companies. He said he 


sees a China that’s becoming | 


less centralized. 


ri 


Richard Clarke, national co- 
ordinator infra- 
structure protection and coun- 
terterrorism at the National 
Security Council, said there’s 
no reason why the government 
can’t share classified informa- 
tion on cybersecurity with the 
IT-ISAC. The initiative is “a 
key element of the govern- 
ment’s cooperation with in- 
dustry,” he said. 

The IT-ISAC is “the 
step to real change” in sharing 
security-related information 
more widely, said Tim Atkin, a 
security consultant at SRA In- 
ternational Inc. in Fairfax, Va., 
and a member of the federally 
organized National Partner- 
ship for Critical Infrastructure 
Protection. But, he added, the 
initiative’s success will be mea- 
sured by the number of compa- 
nies that agree to participate. D 


MORE 


To learn more about ISACs and measures 
against cyberwarfare, see page 44. 


for security, 


first 





“Our operations in China are 
indistinguishable from any of 
the 84 countries where we op- 
erate,” said McGovern, whose 
company also owns a venture 
capital operation that has in- 
vested in more than 100 Web- 
based firms in China. “We've 
never had any problems with 
the Chinese 
stricting what we were doing 
or any incidents where propri- 
etary information was lost.” 

Leung acknowledged that 
there are more controls in 
place in China than in some 
other countries, but he said he 
doesn’t believe they have been 
put in place to foster espi- 
onage. “While the Chinese 
view controls and regulations 
as necessary to facilitate an or- 
derly Internet market and to 
protect the country from sub- 
version ... and other Internet 
crimes, I believe the controls 
are partially the result of politi- 
cal rigidity and bureaucratic 
inertia,” he said. 

“Human nature is the same 
everywhere in the world,” said 
McGovern. “The thought that 
there are lots of people with 
time on their hands to explore 
what the 20 million Internet 
users in China are doing is to- 
tally impractical.” D 


government re- 
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FRANKLY SPEAKING 


Unsafe at Any Speed 


HE FBI JUST ANNOUNCED that in December, it broke 

up an international ring of teen-agers who had bragged 

that their goal was to “take down the Internet” on New 

Year’s Eve. Four kids were arrested in Israel, and others 

in California, Michigan and Washington state had their 
PCs confiscated and are still under investigation. 

Yeah, right, you’re thinking — how likely is it that a handful of 
juvenile delinquents could really shut down the entire Internet? Not 
very. But how likely is it that a bunch of kids could wreak millions 
of dollars’ worth of havoc? That would be almost routine. 


Until a dozen years ago, nobody even thought 
that taking down the Internet was possible. In 
November 1988, it took a bona fide Unix expert 
— Cornell University graduate student Robert 
Morris Jr. — to create a self-replicating worm 
program that brought the Internet to its knees. 

Now, 16-year-olds try it to impress their 
friends 

What happened? You'd think that after 10 years 
of working to make the Internet 
secure and safe for business, we'd 
be looking at a solid, stable plat- 
form insiead of staring into the 
face of Armageddon with acne. 

Sure, part of the problem is that 
over the past decade, the tools for 
attacking the Internet have gotten 
infinitely more sophisticated and 
easier to use. These days, any 
script kiddie with an Internet 
account and a few garden-variety 
hacking tools taken off the Web 
can crank out worms, macro- 
viruses and Trojan horses by 
the yard. 

But it’s also true that the Inter- 
net has grown more fragile over 
the past 10 years. Fragile? Sure. 
Today the Internet is piled high 
with undermaintained servers 
full of security holes. Their own- 
ers — dot-coms and ISPs and 
even some corporate IT shops — 
are more worried about shaving 
the costs of running them than 
about staving off security risks. 

Those are the systems that 
script kiddies target with their 
mutating e-mail viruses and domain-name redi- 
rection scripts and distributed denial-of-service 
attacks. They can barely keep running under 
the best of conditions, much less withstand a 
clever cracker’s exploit. 

And when those systems crack, they make the 
Internet a dangerous neighborhood for every- 
one else. 


The Internet 
has grown 
more fragile 
over the past 
10 years. 


Oh yeah, and there’s one other thing that’s 
created this let’s-bring-down-the-Net attitude: 
us. Face it, just by being there, corporate Web 
sites present a challenge to any kid with a polit- 
ical agenda or bad attitude or just too much 
time on his hands. 

Once, that challenge would have required 
dedication for a would-be cracker to just figure 
out how to make contact with our systems. 
Now, thanks to the Internet, he 
can collect the details of our 
servers in seconds. 

And we're stuck. There’s not 
much we can do about hacker 
tools and script kiddies. And 
there’s no way to retreat to our 
old corporate networks. We 
need the Internet so our sales- 
people can get to customers 
and our inventory systems can 
contact our supply chains — 
so our users can get their jobs 
done. Being giant targets is our 
only option. 

But at least we can be giant 
moving targets. So keep reading 
the security alerts and applying 
the patches and tuning the fire- 
walls and haranguing the users to 
kill suspicious e-mail instead of 
opening it. 

And if the CEO grumbles 
about the security budget, re- 
mind him that there’s nothing as 
dangerous as a 16-year-old who 
thinks he knows everything — 
including how to shut you down. 

And take heart: International 
conspiracy of teens or no, you'll probably never 
have to worry about hackers taking down the 
whole Internet. 

Just your little corner of it. DB 


Hayes, Computerworld’s senior news columnist, 
has covered IT for more than 20 years. Contact him 
at frank_hayes@computerworld.com. 








GOING DOWN? Network pilot 
fish is doing a router upgrade 
and needs to figure out which 
wires are live on the network 

He sends e-mail asking every- 
one working on the second floor 


| to leave their computers on and 


connected to the network. But 
he's unprepared for the flood of 
replies from people asking what 


| floor they work on. Says the 


amazed fish, “| told them to go 


| by what the elevator said.” 


| MESSAGE RECEIVED This 


e-mail showed up at a jewelry 


| company’s IT help desk: “Hi 


guys, I've been trying to send 
and receive e-mails and it’s not 
working. Can you help me? 


| Thanks. ..” 


| UNIX CONSULTANT pilot fish 


walks a customer through the 


| process of backing up a new 
| server to 8 mm tape, so he can 
| assume sysadmin duties. A few 


weeks later, fish gets a call: The 


| newbie sysadmin says he can’t 


use the last of his tape car- 
tridges - “the device rejects it 


shortly after it's loaded,” he says. 


Fish ponders a moment before 


| asking, “Does the tape say 
| ‘Cleaning cartridge’ on it?” 


| STORAGE MANAGEMENT 
| pilot fish recalls the days of con- 
| verting from round reels of tape 


to 3,480 tape cartridges - and 


| trying to explain the difference to 


a computer operator. “I ex- 
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| 

% 
plained that instead of writing at 
6,250 BPI, we'll be writing at 
38,000 BPI.” “Wow,” says the 
impressed operator, “those 
suckers are really going to be 
heavy.” 


LAPTOP USER asks help desk 
pilot fish if his files will fit on 
floppy disks. As long as they're 
smaller than 1.4MB per file, you'll 
be fine, says the fish. Not long 
after, user calls to complain that 
the files won't fit. Bigger than 1.4 
meg? the fish asks. “They aren't 
any meg at all, they're just K,” 
indignant user says. “How many 
K?" fish asks. User replies, 
“1,600.” 


SYSTEMS ANALYST at a small 
hospital can’t resist personally 
checking out a user's complaint 
that a PC is broken. The mysteri- 
ous-sounding symptom: “It 
doesn’t make that spaceship 
noise anymore.” Diagnosis: 
“Someone from housekeeping 
inadvertently unplugged the 
modem line to gain access for a 
vacuum cleaner,” says the fish. 
And the spaceship? “She was 
referring to the noise a modem 
makes when connecting.” 


Forget the modem and shake 
hands with the shark: sharky@ 
computerworld.com. You get 
a snazzy Shark T-shirt if your 
true tale of IT life sees print - or 
if it shows up in the daily feed at 
computerworld.com/sharky. 
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should vead , 


I don't Know what program you been usm’ Frank, 
but it ain't the bo one. Look-your menu bar 


ile, Edit, Reap, Gather..." 
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dimd@ CONFERENCE & EXPO 


The ultimate stage for the ultimate platform 


January 30 - February 2, 200Il 


Jacob K. Javits Convention Center, New York City 


Four days of comprehensive conference training featuring 
sessions in the following tracks: 

- System Administration 

- ASP/Web Serving 

- Business/Legal Issues 


- Kernel/Cluster 
- User Interfaces 
- Perl/PHP/Python (Scripting) 


Face-to-face networking with the experts 


Meet the actual developers of Linux applications and talk to the people who have 
successfully implemented Linux 0/S into their businesses. 


Over 200 exhibitors showing the latest in Linux 
platform technology. 


Keynote Speakers: 

Samuel J. Palmisano, President & COO, IBM Corporation 

William A. Swope, VP of the Intel Architecture Group and Gen Manager, Intel 
Architecture Solutions Enabling Group (SEG), Intel 

Larry Augustin, President, CEO & Director, VA Linux Systems 

Dirk Hohndel, C70, SuSE Linux AG 


Feature Presentation: The Golden Penguin Bowl 
Hosted by: Nick Petreley, Linux Evangelist for Caldera Systems, 
Contributing Editor for LinuxWorld and InfoWorld Magazines 


For more information or to register, visit us at: www.linuxworldexpo.com 
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Virus Protection by Symantec. 
Symantec Virus Protection solutions shield your network at every vulnerable point—firewall, gateway, file and mail servers, all the way to the de 
platforms than any other software. Plus, our Digital Immune System™ automatically eradicates new viruses before they can spread. To find out more @igoU 
visit www.symantec.com/ses or call 800-745-6054 x9AZ1. And put a powerful security force to work for you. : 
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